Known vulnerabilities in Palo Alto PAN-OS - page 9

Software CPE: cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*
Total vulnerabilities: 254
Public exploits: 20
Known exploited (KEV): 12
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Palo Alto PAN-OS Palo Alto PAN-OS is affected by 254 known vulnerabilities: 9 critical, 40 high, 76 medium, 129 low Critical High Medium Low

Vulnerabilities (254)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27899 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1997
CWE-601 Low
No
No
7.1.26, 8.0.14 14.05.2020 SB2020051401
#VU27898 - Improper Authorization
CVE-2020-1998
CWE-285 Low
No
No
7.1.26, 8.1.13, 9.0.6, 9.1.1 14.05.2020 SB2020051401
#VU27897 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2001
CWE-434 High
No
No
8.1.12, 9.0.6 14.05.2020 SB2020051401
#VU27896 - Improper Authentication
CVE-2020-2002
CWE-287 Medium
No
No
7.1.26, 8.1.13, 9.0.6 14.05.2020 SB2020051401
#VU27895 - Improper Access Control
CVE-2020-2003
CWE-284 Low
No
No
8.1.14, 9.0.7, 9.1.1 14.05.2020 SB2020051401
#VU27894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2005
CWE-79 Medium
No
No
7.1.26, 8.1.13, 9.0.7 14.05.2020 SB2020051401
#VU27893 - Memory corruption
CVE-2020-2006
CWE-119 Low
No
No
8.1.14 14.05.2020 SB2020051401
#VU27892 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2007
CWE-78 Low
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU27891 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2008
CWE-78 Low
No
No
8.1.14 14.05.2020 SB2020051401
#VU27890 - Unrestricted Upload of File with Dangerous Type
CVE-2020-2009
CWE-434 Medium
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU27889 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2010
CWE-78 Low
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU27888 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-2012
CWE-611 Medium
No
No
8.1.13, 9.0.7 14.05.2020 SB2020051401
#VU27887 - Cleartext Transmission of Sensitive Information
CVE-2020-2013
CWE-319 Low
No
No
7.1.26, 8.1.13, 9.0.6, 9.1.1 14.05.2020 SB2020051401
#VU27886 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-2014
CWE-78 Medium
No
No
8.1.14, 9.0.7 14.05.2020 SB2020051401
#VU27885 - Memory corruption
CVE-2020-2015
CWE-119 Medium
No
No
7.1.26, 8.1.13, 9.0.7, 9.1.1 14.05.2020 SB2020051401
#VU27884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2017
CWE-79 Low
No
No
7.1.26, 8.1.13, 9.0.6 14.05.2020 SB2020051401
#VU27883 - Improper Authentication
CVE-2020-2018
CWE-287 Medium
No
No
7.1.26, 8.0.21, 8.1.12, 9.0.6 14.05.2020 SB2020051401
#VU26742 - Use of Externally-Controlled Format String
CVE-2020-1992
CWE-134 High
No
No
9.0.7, 9.1.2 09.04.2020 SB2020040909
#VU26741 - Stack-based buffer overflow
CVE-2020-1990
CWE-121 Medium
No
No
8.1.13, 9.0.7 09.04.2020 SB2020040908
#VU7410 - Integer overflow
CVE-2017-7529
CWE-190 Medium
Available
No
7.1.26, 8.1.13, 9.0.6 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more


Showing elements 161 - 180 out of 254