Known vulnerabilities in Palo Alto PAN-OS - page 7

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 258
Public exploits: 20
Known exploited (KEV): 12

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 258 known vulnerabilities: 9 critical, 41 high, 76 medium, 132 low Critical High Medium Low

Vulnerabilities (258)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56409 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3052
CWE-79 Medium
No
No
8.1.20, 9.0.14, 9.1.10, 10.0.2 08.09.2021 SB2021090817
#VU56408 - Improper Handling of Exceptional Conditions
CVE-2021-3053
CWE-755 Medium
No
No
8.1.20, 9.0.14, 9.1.9, 10.0.5 08.09.2021 SB2021090818
#VU56407 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-3054
CWE-367 Low
No
No
8.1.20, 9.0.14, 9.1.11, 10.0.7, 10.1.2 08.09.2021 SB2021090819
#VU56406 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-3055
CWE-611 Low
No
No
8.1.20, 9.0.14, 9.1.10, 10.0.6 08.09.2021 SB2021090820
#VU55823 - Improper input validation
CVE-2021-3048
CWE-20 Medium
No
No
9.0.14, 9.1.9, 10.0.5 12.08.2021 SB2021081224
#VU55822 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-3047
CWE-338 Low
No
No
8.1.19, 9.0.14, 9.1.10, 10.0.4 12.08.2021 SB2021081223
#VU55821 - Improper Authentication
CVE-2021-3046
CWE-287 Medium
No
No
8.1.19, 9.0.14, 9.1.9, 10.0.5 12.08.2021 SB2021081222
#VU55789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3045
CWE-78 Low
No
No
8.1.19, 9.0.14, 9.1.10 11.08.2021 SB2021081117
#VU55788 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3050
CWE-78 Low
No
No
9.0.15, 9.1.11, 10.0.8, 10.1.2 11.08.2021 SB2021081116
#VU52223 - Information Exposure Through Log Files
CVE-2021-3037
CWE-532 Low
No
No
8.1.19, 9.0.13, 9.1.4 14.04.2021 SB2021041419
#VU52222 - Information Exposure Through Log Files
CVE-2021-3036
CWE-532 Low
No
No
8.1.19, 9.0.12, 9.1.6, 10.0.1 14.04.2021 SB2021041418
#VU49514 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3031
CWE-200 Low
No
No
8.1.18, 9.0.12, 9.1.5 13.01.2021 SB2021011317
#VU49515 - Information Exposure Through Log Files
CVE-2021-3032
CWE-532 Low
No
No
8.1.18, 9.0.12, 9.1.4, 10.0.1 13.01.2021 SB2021011318
#VU48412 - Stack-based buffer overflow
CWE-121 Low
No
No
8.1.16, 9.0.10, 9.1.4, 10.0.1 12.11.2020 SB2020111220
#VU48411 - Improper input validation
CWE-20 Low
No
No
8.1.16, 9.0.10, 9.1.4, 10.0.1 12.11.2020 SB2020111220
#VU48409 - Improper Check for Unusual or Exceptional Conditions
CVE-2020-1999
CWE-754 Medium
No
No
8.1.17, 9.0.11, 9.1.5 12.11.2020 SB2020111219
#VU48410 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2000
CWE-78 Low
No
No
8.1.16, 9.0.10, 9.1.4, 10.0.1 12.11.2020 SB2020111220
#VU48413 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2022
CWE-200 Medium
No
No
8.1.17, 9.0.11, 9.1.5 12.11.2020 SB2020111221
#VU48414 - Information Exposure Through Log Files
CVE-2020-2048
CWE-532 Low
No
No
8.1.17, 9.0.11, 9.1.2 12.11.2020 SB2020111222
#VU48415 - Improper Authentication
CVE-2020-2050
CWE-287 Medium
No
No
8.1.17, 9.0.11, 9.1.5, 10.0.1 12.11.2020 SB2020111223


Showing elements 121 - 140 out of 258