Known vulnerabilities in Palo Alto PAN-OS - page 4

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 254
Public exploits: 20
Known exploited (KEV): 12
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 254 known vulnerabilities: 9 critical, 40 high, 76 medium, 129 low Critical High Medium Low

Vulnerabilities (254)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100528 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9474
CWE-78 High
Available
Exploited
10.1.14-h6, 10.2.12-h2, 11.0.6-h1, 11.1.5-h1, 11.2.4-h1 15.11.2024 SB2024111558
SB2024120609
#VU98345 - Out-of-bounds write
CVE-2024-9468
CWE-787 Medium
No
No
10.2.9-h11, 10.2.10-h4, 10.2.11, 11.0.4-h5, 11.0.6, 11.1.3 10.10.2024 SB2024101018
#VU98343 - Improper Privilege Management
CVE-2024-9471
CWE-269 Low
No
No
10.1.11, 10.2.8, 11.0.3 10.10.2024 SB2024101016
#VU97293 - Exposure of sensitive information to an unauthorized actor
CVE-2024-8687
CWE-200 Low
No
No
8.1.25, 9.0.17, 9.1.16, 10.0.12, 10.1.9, 10.2.4, 11.0.1 16.09.2024 SB2024091612
#VU97165 - Incorrect Authorization
CVE-2024-8691
CWE-863 Medium
No
No
9.1.17, 10.1.11 11.09.2024 SB2024091149
#VU97164 - Improper Neutralization of Wildcards or Matching Symbols
CVE-2024-8688
CWE-155 Low
No
No
9.1.15, 10.0.10, 10.1.1 11.09.2024 SB2024091149
#VU97163 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-8686
CWE-78 Low
No
No
11.2.3 11.09.2024 SB2024091149
#VU96010 - Cleartext Storage in a File or on Disk
CVE-2024-5916
CWE-313 Low
No
No
10.2.8, 11.0.4 14.08.2024 SB2024081464
#VU94371 - Unrestricted Upload of File with Dangerous Type
CVE-2024-5911
CWE-434 Low
No
No
10.1.9, 10.2.4 16.07.2024 SB2024071637
#VU94370 - Improper input validation
CVE-2024-5913
CWE-20 Low
No
No
10.1.14-h2, 10.2.10, 11.0.5, 11.1.4, 11.2.1 16.07.2024 SB2024071632
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
9.1.19, 10.1.14, 10.2.10, 11.0.4-h4, 11.1.3 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU88521 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2023-38046
CWE-610 Low
No
No
10.2.4, 11.0.1 15.04.2024 SB2024041514
SB2024041515
#VU88507 - Allocation of Resources Without Limits or Throttling
CVE-2024-3382
CWE-770 Medium
No
No
10.2.7-h3, 11.0.4, 11.1.2 12.04.2024 SB2024041228
#VU88506 - Command injection
CVE-2024-3400
CWE-77 Critical
Available
Exploited
10.2.9-h1, 11.0.4-h1, 11.1.2-h3 12.04.2024 SB2024041225
#VU88505 - Permissions, Privileges, and Access Controls
CVE-2024-3383
CWE-264 High
No
No
10.1.11, 10.2.5, 11.0.3 12.04.2024 SB2024041223
#VU88504 - Improper input validation
CVE-2024-3384
CWE-20 Medium
No
No
8.1.24, 9.0.17, 9.1.15-h1, 10.0.12 12.04.2024 SB2024041222
#VU88502 - NULL Pointer Dereference
CVE-2024-3385
CWE-476 Medium
No
No
9.0.17-h4, 9.1.17, 10.1.12, 10.2.8, 11.0.3 12.04.2024 SB2024041219
#VU88498 - Interpretation Conflict
CVE-2024-3386
CWE-436 Medium
No
No
9.0.17-h2, 9.1.17, 10.0.13, 10.1.9-h3, 10.1.10, 10.2.4-h2, 10.2.5, 11.0.1-h2, 11.0.2 12.04.2024 SB2024041217
#VU88495 - Inadequate Encryption Strength
CVE-2024-3387
CWE-326 Medium
No
No
10.1.12, 10.2.7-h3, 10.2.8, 11.0.4 12.04.2024 SB2024041211
#VU88493 - Improper Privilege Management
CVE-2024-3388
CWE-269 Low
No
No
8.1.26, 9.0.17-h4, 9.1.17, 10.1.11-h4, 10.2.7-h3, 11.0.3 12.04.2024 SB2024041210


Showing elements 61 - 80 out of 254