Known vulnerabilities in Prisma Access

Software: Prisma Access
Software CPE: cpe:2.3:a:palo_alto_networks:prisma_access:*:*:*:*:*:*:*:*
Total vulnerabilities: 22
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Prisma Access Prisma Access is affected by 22 known vulnerabilities: 1 critical, 7 high, 5 medium, 9 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122749 - Improper Certificate Validation
CVE-2026-0228
CWE-295 Medium
No
No
10.2.10-h28, 11.2.7-h10 12.02.2026 SB2026021223
#VU113656 - Use After Free
CVE-2025-8576
CWE-416 Medium
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 10 more
#VU113657 - Improperly Implemented Security Check for Standard
CVE-2025-8577
CWE-358 High
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 6 more
#VU113658 - Use After Free
CVE-2025-8578
CWE-416 Medium
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 14 more
#VU113659 - Improperly Implemented Security Check for Standard
CVE-2025-8579
CWE-358 Low
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 13 more
#VU113660 - Improperly Implemented Security Check for Standard
CVE-2025-8580
CWE-358 Low
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 8 more
#VU113661 - Improperly Implemented Security Check for Standard
CVE-2025-8581
CWE-358 Low
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 14 more
#VU113662 - Improper input validation
CVE-2025-8582
CWE-20 Low
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 8 more
#VU113663 - Improperly Implemented Security Check for Standard
CVE-2025-8583
CWE-358 Low
No
No
139.12.4.128 05.08.2025 SB2025080602
SB2025080707
SB2025080816
and 8 more
#VU112062 - Type confusion
CVE-2025-6554
CWE-843 Critical
Available
Exploited
138.33.5.97 01.07.2025 SB2025070105
SB2025070250
SB2025070269
and 7 more
#VU111901 - Use After Free
CVE-2025-6555
CWE-416 Medium
No
No
138.33.5.97 24.06.2025 SB2025062455
SB2025062701
SB2025062702
and 6 more
#VU111902 - Permissions, Privileges, and Access Controls
CVE-2025-6556
CWE-264 Low
No
No
138.33.5.97 24.06.2025 SB2025062455
SB2025062701
SB2025062702
and 6 more
#VU111903 - Improper input validation
CVE-2025-6557
CWE-20 Low
No
No
138.33.5.97 24.06.2025 SB2025062455
SB2025062701
SB2025062702
and 5 more
#VU111233 - Integer overflow
CVE-2025-6191
CWE-190 High
No
No
138.33.5.97 17.06.2025 SB2025061737
SB2025061963
SB2025062028
and 5 more
#VU111234 - Use After Free
CVE-2025-6192
CWE-416 High
No
No
138.33.5.97 17.06.2025 SB2025061737
SB2025061963
SB2025062028
and 6 more
#VU110745 - Use After Free
CVE-2025-5958
CWE-416 High
No
No
138.33.5.97 10.06.2025 SB2025061087
SB2025061201
SB2025061246
and 5 more
#VU110746 - Type confusion
CVE-2025-5959
CWE-843 High
No
No
138.33.5.97 10.06.2025 SB2025061087
SB2025061201
SB2025061246
and 5 more
#VU107408 - Session Fixation
CVE-2025-0126
CWE-384 High
No
No
10.2.4-h36, 10.2.10-h16, 11.2.4-h5 14.04.2025 SB2025041421
#VU107407 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-0128
CWE-754 High
No
No
10.2.4-h36, 10.2.10-h16, 11.2.4-h5 14.04.2025 SB2025041419
#VU97293 - Exposure of sensitive information to an unauthorized actor
CVE-2024-8687
CWE-200 Low
No
No
10.2.9 16.09.2024 SB2024091612


Showing elements 1 - 20 out of 22