Known vulnerabilities in Palo Alto PAN-OS - page 3
Vendor:
Palo Alto Networks, Inc.
Software:
Palo Alto PAN-OS
Software CPE:
cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Website:
https://www.paloaltonetworks.com/
Total vulnerabilities:
254
Public exploits:
20
Known exploited (KEV):
12
Highest CVSSv4 Score:
10
Breakdown by Severity Chart
11.1.17
11.1.16-h1
11.2.10-h11
10.2.18-h8
10.2.16-h9
10.2.13-h23
10.2.10-h39
10.2.7-h36
11.1.13-h9
11.1.10-h30
11.1.7-h8
11.1.6-h35
11.1.4-h35
11.2.10-h12
11.2.7-h18
11.2.4-h20
12.1.4-h8
12.1.7-h2
12.1.7-h1
11.1.16
11.2.13
12.1.8
12.2
10.2.18-h7
11.1.7-h7
12.1.6
10.2.7-h35
10.2.10-h37
10.2.13-h22
10.2.16-h8
11.1.4-h34
11.1.6-h33
11.1.10-h27
11.1.13-h7
11.2.4-h18
11.2.7-h16
11.2.10-h9
11.1.10-h26
11.1.13-h6
11.2.7-h14
11.2.7-h15
11.2.10-h7
11.2.10-h8
12.1.4-h7
12.1.4-h6
11.1.14
11.2.11
12.1.5
10.2.13-h21
10.2.7-h34
11.1.15
11.1.7-h6
11.2.12
11.2.4-h17
12.1.7
10.2.18-h6
10.2.16-h7
10.2.10-h36
11.1.13-h5
11.1.10-h25
11.1.6-h32
11.1.4-h33
11.2.10-h6
11.2.7-h13
12.1.4-h5
10.2.18-h5
10.2.18-h4
10.2.18-h3
10.2.18-h2
10.2.13-h20
10.2.13-h19
10.2.10-h35
10.2.10-h34
10.2.10-h33
10.2.10-h32
10.2.10-h31
10.2.7-h33
11.1.13-h4
11.1.13-h3
11.1.13-h2
11.1.13-h1
11.1.10-h24
11.1.10-h23
11.1.10-h22
11.1.10-h21
11.1.10-h20
11.1.10-h19
11.1.10-h18
11.1.10-h17
11.1.10-h16
11.1.10-h15
11.1.10-h14
11.1.10-h13
11.1.10-h12
11.1.10-h11
11.1.10-h10
11.1.7-h5
11.1.7-h4
11.1.7-h3
11.1.7-h1
11.1.6-h31
11.1.6-h30
11.1.6-h29
11.1.6-h28
11.1.6-h27
11.1.6-h26
11.1.6-h25
11.1.6-h24
11.1.4-h32
11.1.4-h31
11.1.4-h30
11.1.4-h29
11.1.4-h28
11.2.10-h5
11.2.10-h4
11.2.10-h3
11.2.7-h12
11.2.7-h11
11.2.7-h10
11.2.7-h9
11.2.4-h16
12.1.4-h4
12.1.4-h3
12.1.4-h2
12.1.4-h1
11.2.9
10.2.7-h32
10.2.10-h30
10.2.13-h18
10.2.16-h6
10.2.18-h1
11.1.4-h27
11.1.6-h23
11.1.10-h9
11.1.13
11.2.4-h15
11.2.7-h8
11.2.10-h2
12.1.4
10.2.7-h31
10.2.7-h30
10.2.7-h29
10.2.7-h28
10.2.7-h27
10.2.7-h26
10.2.7-h25
10.2.10-h29
10.2.10-h28
10.2.10-h27
10.2.10-h26
10.2.10-h25
10.2.10-h24
10.2.10-h23
10.2.10-h22
10.2.10-h21
10.2.10-h20
10.2.10-h19
10.2.10-h18
10.2.10-h16
10.2.10-h15
10.2.13-h17
10.2.13-h16
10.2.13-h15
10.2.13-h14
10.2.13-h13
10.2.13-h12
10.2.13-h11
10.2.13-h10
10.2.13-h9
10.2.13-h8
10.2.13-h7
10.2.13-h6
10.2.16-h5
10.2.16-h4
10.2.16-h3
10.2.16-h2
10.2.16-h1
10.2.18
11.1.10-h8
11.1.10-h7
11.1.10-h6
11.1.10-h5
11.1.10-h4
11.1.10-h3
11.1.10-h2
11.1.10-h1
11.1.6-h22
11.1.6-h21
11.1.6-h20
11.1.6-h19
11.1.6-h18
11.1.6-h17
11.1.6-h16
11.1.6-h15
11.1.6-h14
11.1.6-h13
11.1.6-h12
11.1.6-h11
11.1.6-h10
11.1.6-h9
11.1.6-h8
11.1.6-h7
11.1.6-h6
11.1.6-h5
11.1.6-h4
11.1.6-h3
11.1.6-h2
11.1.4-h26
11.1.4-h25
11.1.4-h24
11.1.4-h23
11.1.4-h22
11.1.4-h21
11.1.4-h20
11.1.4-h19
11.1.4-h18
11.1.4-h17
11.1.4-h16
11.1.4-h15
11.1.4-h14
11.2.10-h1
11.2.10
11.2.7-h7
11.2.7-h6
11.2.7-h5
11.2.7-h4
11.2.7-h3
11.2.7-h2
11.2.7-h1
11.2.4-h14
11.2.4-h13
11.2.4-h12
11.2.4-h11
11.2.4-h10
11.2.4-h9
11.2.4-h8
11.2.4-h7
11.2.4-h6
11.2.4-h5
12.1.3-h2
12.1.3-h1
12.1.3
12.1.2
12.1.1
10.2.12-h4
11.2.3-h6
11.2.3-h5
11.2.3-h4
11.2.3-h3
11.2.3-h2
11.2.3-h1
11.2.2-h2
11.1.4-h13
11.1.4-h12
11.1.4-h11
11.1.4-h10
11.1.4-h9
11.1.4-h8
11.1.4-h7
11.1.4-h6
11.1.4-h5
11.1.3-h13
11.1.3-h12
11.1.3-h11
11.1.3-h9
11.1.3-h8
11.1.3-h7
11.1.3-h5
11.1.3-h3
11.1.3-h1
11.1.2-h18
11.1.2-h17
11.1.2-h16
11.1.2-h15
11.1.2-h13
11.1.2-h11
11.1.2-h10
10.2.7-h24
10.2.7-h23
10.2.7-h22
10.2.7-h21
10.2.7-h20
10.2.7-h19
10.2.7-h18
10.2.7-h17
10.2.8-h21
10.2.8-h20
10.2.8-h19
10.2.8-h18
10.2.8-h17
10.2.8-h16
10.2.8-h15
10.2.8-h14
10.2.8-h12
10.2.8-h11
10.2.8-h9
10.2.8-h8
10.2.8-h7
10.2.8-h6
10.2.8-h5
10.2.9-h21
10.2.9-h20
10.2.9-h19
10.2.9-h18
10.2.9-h17
10.2.9-h16
10.2.9-h15
10.2.9-h14
10.2.11-h12
10.2.11-h11
10.2.11-h10
10.2.11-h9
10.2.11-h8
10.2.11-h7
10.2.11-h6
10.2.11-h5
10.2.12-h6
10.2.12-h5
10.2.12-h3
11.1.12
10.1.14-h15
11.0.7
10.1.14-h14
10.2.16
11.1.9
11.1.10
11.2.7
11.2.8
11.1.11
10.2.17
11.1.7-h2
10.1.13
10.2.4-h17
10.2.4-h18
10.2.4-h19
10.2.4-h20
10.2.4-h21
10.2.4-h22
10.2.4-h23
10.2.4-h24
10.2.4-h26
10.2.4-h27
10.2.4-h28
10.2.4-h29
10.2.4-h30
10.2.4-h31
10.2.4-h32
10.2.10-h13
10.2.10-h14
10.2.4-h25
10.2.9-h13
10.2.9-h12
10.2.10-h17
11.2.0
11.2.6
10.2.15
10.1.14-h13
10.1.14-h12
11.1.7
11.2.5
11.1.8
10.2.14
10.2.13-h5
10.2.13-h4
10.1.14-h11
10.1.14-h10
10.2.8-h2
10.1.14-h9
10.2.13-h3
11.1.6-h1
11.2.4-h4
11.1.6
11.2.4-h3
11.2.4-h2
12.1
10.1.14-h8
10.1.14-h7
10.2.13-h2
10.2.13-h1
10.2.13
10.2.10-h12
10.2.10-h11
10.2.10-h10
10.2.10-h9
10.2.10-h8
10.2.10-h6
10.2.10-h5
10.2.0-h3
10.2.1-h2
10.2.2-h5
10.2.2-h3
10.2.3-h13
10.2.3-h12
10.2.3-h11
10.2.3-h10
10.2.3-h8
10.2.3-h7
10.2.3-h6
10.2.3-h5
10.2.3-h3
10.2.4-h16
10.2.4-h15
10.2.4-h14
10.2.4-h13
10.2.4-h12
10.2.4-h11
10.2.4-h10
10.2.4-h9
10.2.4-h8
10.2.4-h7
10.2.5-h6
10.2.5-h5
10.2.5-h3
10.2.5-h2
10.2.6-h3
10.2.6-h2
10.2.7-h15
10.2.7-h14
10.2.7-h13
10.2.7-h11
10.2.7-h10
10.2.7-h9
10.2.7-h8
10.2.7-h7
10.2.7-h6
10.2.7-h5
10.2.7-h4
11.0.0-h3
11.0.1-h1
11.0.1-h4
11.0.2-h4
11.0.3-h12
11.0.3-h11
11.0.3-h10
11.0.3-h9
11.0.3-h8
11.0.3-h7
11.0.3-h6
11.0.3-h4
11.0.3-h2
11.0.5-h1
11.1.0-h3
11.1.1-h1
11.1.4-h4
11.1.4-h3
11.1.4-h2
11.1.4-h1
10.1.6-h5
10.1.6-h4
10.1.6-h3
10.1.6-h2
10.1.6-h1
10.2.11-h4
10.2.10-h7
10.2.9-14
10.2.8-h13
10.2.7-h16
11.1.3-h10
11.1.2-h14
11.2.2-h3
11.2.2-h1
11.1.3-h6
11.1.3-h4
11.1.3-h2
11.1.2-h12
10.2.11-h3
10.2.11-h2
10.2.11-h1
10.2.8-h10
10.2.7-h12
10.1.14-h6
10.1.14-h5
10.1.14-h4
10.1.14-h3
10.2.12-h2
10.2.12-h1
10.2.12
11.0.6-h1
11.1.5-h1
11.1.5
11.2.4-h1
11.2.4
10.1.14-h1
10.2.4-h6
10.2.4-h5
10.2.11
10.2.10-h4
10.2.10-h3
10.2.10-h2
10.2.10-h1
10.2.9-h11
10.2.9-h10
10.2.9-h9
10.2.9-h8
10.2.9-h7
10.2.9-h6
10.2.9-h5
10.2.9-h4
10.2.9-h3
10.2.9-h2
11.0.6
11.0.4-h5
11.2.3
11.2.2
10.2.8-h1
11.1.2-h9
11.0.4-h3
11.0.4-h2
10.1.14
11.0.4-h4
10.1.14-h2
10.2.10
11.0.5
11.1.4
11.2.1
10.0.12-h6
9.1.19
10.2.8-h4
11.1.3
11.1.2-h4
11.2
10.2.8-h3
10.2.9-h1
11.0.4-h1
11.1.2-h3
11.1.2-h2
10.1.9-h3
10.1.9-h2
10.1.9-h1
10.2.7-h2
10.1.11-h4
10.1.11-h3
10.1.11-h2
11.0.4
10.2.9
10.2.8
10.2.7-h3
10.2.7-h1
10.2.7
10.2.6-h1
10.2.5-h4
10.2.5-h1
10.2.4-h4
10.2.4-h3
10.2.4-h2
10.2.4-h1
10.2.3-h9
10.2.3-h4
10.2.3-h2
10.2.3-h1
10.2.2-h4
10.2.2-h1
10.2.1-h1
10.2.0-h2
10.2.0-h1
11.1.2-h1
11.1.2
11.1.1
11.1.0-h2
11.1.0-h1
11.1.0
11.0.3-h5
11.0.3-h3
11.0.3-h1
11.0.2-h3
11.0.2-h2
11.0.2-h1
11.0.1-h3
11.0.1-h2
11.0.0-h2
11.0.0-h1
9.1.18
10.1.10-h1
10.0.13
9.0.18
10.1.12
10.1.11-h1
8.1.26-h1
9.0.17-h5
9.0.16-h7
9.0.16-h6
9.1.17-h1
9.1.16-h5
9.1.14-h8
9.1.13-h5
9.1.12-h7
9.1.11-h5
8.1.25-h3
8.1.21-h3
10.0.12-h5
10.0.11-h4
10.0.8-h11
9.0.17-h3
9.0.17-h2
9.1.16-h3
9.1.16-h2
9.1.16-h1
11.0.3
9.1.17
8.1.26
9.0.17-h4
9.1.16-h4
10.0.12-h4
8.1.25-h2
9.0.16-6
10.0.12-h3
10.0.8-h10
10.0.11-h3
9.1.13-h4
8.1.25-h1
9.1.12-h6
9.0.16-h5
9.1.14-h7
9.1.11-h4
9-1-16-h3
10.2.6
11.1
11.0
10.1
10.0
10.1.11
11.0.2
11.0.0
10.2.5
10.1.10
11.0.1
8.1.25
10.0.12-h1
10.2.4
9.0.17-h1
9.1.16
10.0.12
9.0.17
8.1.24-h2
10.1.9
8.1.24-h1
9.1.15-h1
10.2
9.1.15
10.1.8
8.1.24
10.2.3
10.1.7
10.0.11-h1
8.1.23-h1
9.0.16-h3
9.1.14-h4
10.1.6-h6
10.2.2-h2
10.2.2
10.0.11
9.1.14-h1
10.1.6
9.1.14
10.0.10-h1
9.0.16-h2
9.1.13-h3
10.2.1
10.2.0
10.1.5-hf
10.1.5
10.0.10
9.1.13-hf
9.0.16-hf
8.1.23
9.1.13-h1
9.0.16
8.1.22
9.1.13
10.0.9
9.1.12-h4
10.1.4
8.1.21-h1
10.0.8-h8
9.1.12-h3
9.1.12
9.1.11-h2
9.1.3-h1
9.1.2-h1
8.1.20-h1
8.1.15-h3
8.1.14-h2
9.0.14-h3
9.0.9-h1
9.0.14-h4
9.1.11-h3
10.0.8-h4
8.1.21
10.1.3
8.1.20
9.0.15
9.1.11
10.1.2
10.1.1
10.1.0
10.0.8
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
9.0.14
9.1.10
8.1.19
9.0.13
9.1.9
9.1.8
9.1.7
9.1.6
9.0.12
8.1.18
8.1.17
9.0.11
9.1.5
9.1.4
10.0.1
9.0.10
8.1.16
5.0.5
5.0.4
5.0.3
5.0.2
4.1.12
4.1.11
5.0.0-h1
5.0.0
4.1.10
4.1.9
4.1.8-h3
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
3.1.10
4.1.2
4.1.1
4.0.8
4.1.0
3.1.9
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
7.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0
5.1
7.0.5-h2
10.0.0
8.1.15
9.1.3
9.2.0
9.0.9
9.0.8
8.1.14
8.0.21
7.1.26
8.0
9.1.1
9.1.0
9.1.2
9.0.6
9.0.7
8.1.13
9.0
8.1
7.1
9.1
9.0.5-h3
9.0.3-h2
8.1.12
9.0.5
9.0.4
8.0.20
7.1.25
8.1.11
8.1.10
9.0.2-h4
8.1.8-h4
8.0.19-h1
7.1.24-h1
9.0.3
9.0.2
9.0.1
9.0.0
9.0.3-h3
8.1.9-h4
8.1.9
8.1.8-h5
8.1.8
8.1.7
8.1.6-h2
8.1.4-h2
8.1.0
8.0.19
8.0.18
8.0.17
8.0.16
8.0.13
8.0.11-h1
8.0.6-h3
8.0.4-h2
8.0.3-h4
7.1.24
7.1.23
7.1.20
7.1.18
7.1.16
7.1.15
7.1.9-h4
7.1.4-h2
8.1.6
8.1.5
8.0.15
8.0.14
7.1.22
7.1.21
8.1.4
8.1.3
7.1.19
8.0.12
8.1.2
8.1.1
7.1.17
6.1.21
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
7.1.14
7.0.19
6.1.19
8.0.4
8.0.5
7.1.13
7.1.12
7.0.18
7.0.17
8.0.3
8.0.2
8.0.1
8.0.0
7.1.11
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.0
7.0.16
7.0.15
7.0.14
7.0.13
7.0.12
6.1.18
6.1.17
6.1.16
6.1.13
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
7.0.10
6.1.14
7.1.5
7.0.11
6.1.15
6.0.15
5.1.13
5.0.20
6.1.12
6.0.14
5.0.19
6.1.0
6.0.x
5.1.12
5.1.x
5.0.x
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
7.1.4
7.1.3
7.1.2
7.0.9
7.0.8
7.0.5
7.0.7
5.1.11
7.1.1
7.0.6
6.1.11
6.0.13
5.0.18
Vulnerabilities (254)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107407 - Improper Check for Unusual or Exceptional Conditions CVE-2025-0128 |
CWE-754 | High | 10.1.14-h11, 10.2.10-h17, 11.0.6, 11.1.5, 11.2.3 | 14.04.2025 |
SB2025041419 |
||
| #VU107406 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-0127 |
CWE-78 | Low | 10.1.14-h13, 10.2.9, 11.0.4 | 14.04.2025 |
SB2025041420 |
||
| #VU107403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-0125 |
CWE-79 | Low | 10.1.14-h11, 10.2.11, 11.0.6, 11.1.5, 11.2.5 | 14.04.2025 |
SB2025041418 |
||
| #VU107400 - Cleartext Storage of Sensitive Information CVE-2025-0123 |
CWE-312 | Low | 10.1.14-h13, 10.2.15, 11.1.8, 11.2.6 | 14.04.2025 |
SB2025041417 |
||
| #VU105792 - Improper Check for Unusual or Exceptional Conditions CVE-2025-0116 |
CWE-754 | Low | 10.1.14-h11, 10.2.13, 10.2.13-h5, 10.2.14, 11.1.8, 11.2.5 | 17.03.2025 |
SB2025031751 |
||
| #VU105791 - Improper Resolution of Path Equivalence CVE-2025-0115 |
CWE-41 | Low | 10.1.14-h11, 10.2.11, 11.0.6, 11.1.5, 11.2.3 | 17.03.2025 |
SB2025031752 |
||
| #VU105784 - Resource exhaustion CVE-2025-0114 |
CWE-400 | High | 10.1.14-h11, 10.2.5, 11.0.2 | 17.03.2025 |
SB2025031753 |
||
| #VU104022 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-0111 |
CWE-22 | High | 10.1.14-h9, 10.2.13-h3, 11.1.6-h1, 11.2.4-h4 | 18.02.2025 |
SB2025021804 |
||
| #VU103927 - External Control of File Name or Path CVE-2025-0109 |
CWE-73 | Medium | 10.1.14-h9, 10.2.13-h3, 11.1.6-h1, 11.2.4-h4 | 12.02.2025 |
SB2025021287 |
||
| #VU103926 - Missing Authentication for Critical Function CVE-2025-0108 |
CWE-306 | High | 10.1.14-h9, 10.2.13-h3, 11.1.6-h1, 11.2.4-h4 | 12.02.2025 |
SB2025021286 |
||
| #VU101970 - Improper Check for Unusual or Exceptional Conditions CVE-2024-3393 |
CWE-754 | High | 10.1.14-h8, 10.2.10-h12, 10.2.13-h2, 11.1.5, 11.2.3 | 27.12.2024 |
SB2024122768 |
||
| #VU100660 - NULL Pointer Dereference CVE-2024-2550 |
CWE-476 | Medium | 10.2.11, 11.0.6, 11.1.5 | 19.11.2024 |
SB2024111970 SB2024120609 |
||
| #VU100659 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-2552 |
CWE-22 | Low | 10.2.12, 11.0.6, 11.1.5, 11.2.4 | 19.11.2024 |
SB2024111969 SB2024120609 |
||
| #VU100657 - Server-Side Request Forgery (SSRF) CVE-2024-5917 |
CWE-918 | Medium | 10.1.7, 10.2.2 | 19.11.2024 |
SB2024111968 |
||
| #VU100606 - Improper Certificate Validation CVE-2024-5918 |
CWE-295 | Low | 10.1.11, 10.2.4-h5, 11.0.3 | 19.11.2024 |
SB2024111919 |
||
| #VU100603 - NULL Pointer Dereference CVE-2024-9472 |
CWE-476 | Medium | 10.2.7-h16, 10.2.8-h13, 10.2.9-14, 10.2.10-h7, 10.2.11-h4, 11.1.2-h14, 11.1.3-h10, 11.2.2-h3, 11.2.3 | 19.11.2024 |
SB2024111915 |
||
| #VU100599 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-5919 |
CWE-611 | Low | 10.1.10, 10.2.5, 11.0.2 | 18.11.2024 |
SB2024111861 |
||
| #VU100596 - Improper Authentication CVE-2024-0012 |
CWE-287 | Critical | 10.2.12-h2, 11.0.6-h1, 11.1.5-h1, 11.2.4-h1 | 18.11.2024 |
SB2024111838 SB2024120609 |
||
| #VU100533 - NULL Pointer Dereference CVE-2024-2551 |
CWE-476 | Medium | 10.1.14, 10.2.4-h6, 10.2.5, 11.0.5 | 15.11.2024 |
SB2024111572 |
||
| #VU100532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-5920 |
CWE-79 | Low | 10.1.14, 10.2.11, 11.0.6, 11.1.4 | 15.11.2024 |
SB2024111571 |
Showing elements 41 - 60 out of 254