Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2021-3044 Cortex XSOAR: Unauthorized Usage of the REST API — Cortex XSOAR CWE-285 9.8 Critical 2021-06-22
CVE-2021-3041 Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation — Cortex XDR Agent CWE-427 7.8 High 2021-06-10
CVE-2021-3039 Prisma Cloud Compute: User role authorization secret for Console leaked through log file export — Prisma Cloud Compute CWE-532 3.8 Low 2021-06-10
CVE-2021-3040 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution — Bridgecrew Checkov CWE-502 6.7 Medium 2021-06-10
CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS) — GlobalProtect App CWE-20 5.5 Medium 2021-04-20
CVE-2021-3037 PAN-OS: Secrets for scheduled configuration exports are logged in system logs — PAN-OS CWE-534 2.3 Low 2021-04-20
CVE-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution — Bridgecrew Checkov CWE-502 6.7 Medium 2021-04-20
CVE-2021-3036 PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly — PAN-OS CWE-532 4.4 Medium 2021-04-20
CVE-2021-3034 Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs — Cortex XSOAR CWE-532 5.1 Medium 2021-03-10
CVE-2021-3033 Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console — Prisma Cloud Compute CWE-347 9.1 Critical 2021-02-10
CVE-2021-3032 PAN-OS: Configuration secrets for log forwarding may be logged in system logs — PAN-OS CWE-532 4.4 Medium 2021-01-13
CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) — PAN-OS CWE-200 4.3 Medium 2021-01-13
CVE-2020-2049 Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation — Cortex XDR Agent CWE-427 7.8 High 2020-12-09
CVE-2020-2020 Cortex XDR Agent: Exceptional condition denial-of-service (DoS) — Cortex XDR Agent CWE-755 5.5 Medium 2020-12-09
CVE-2020-2050 PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification — PAN-OS CWE-285 8.2 High 2020-11-12
CVE-2020-2048 PAN-OS: System proxy passwords may be logged in clear text while viewing system state — PAN-OS CWE-532 3.3 Low 2020-11-12
CVE-2020-2022 PAN-OS: Panorama session disclosure during context switch into managed device — PAN-OS CWE-200 7.5 High 2020-11-12
CVE-2020-1999 PAN-OS: Threat signatures are evaded by specifically crafted packets — PAN-OS CWE-754 5.3 Medium 2020-11-12
CVE-2020-2000 PAN-OS: OS command injection and memory corruption vulnerability — PAN-OS CWE-20 7.2 High 2020-11-12
CVE-2020-2043 PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs — PAN-OS CWE-532 3.3 Low 2020-09-09
CVE-2020-2044 PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history — PAN-OS CWE-532 3.3 Low 2020-09-09
CVE-2020-2042 PAN-OS: Buffer overflow in the management web interface — PAN-OS CWE-121 7.2 High 2020-09-09
CVE-2020-2040 PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled — PAN-OS CWE-120 9.8 Critical 2020-09-09
CVE-2020-2041 PAN-OS: Management web interface denial-of-service (DoS) — PAN-OS CWE-16 7.5 High 2020-09-09
CVE-2020-2038 PAN-OS: OS command injection vulnerability in the management web interface — PAN-OS CWE-78 7.2 High 2020-09-09
CVE-2020-2039 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload — PAN-OS CWE-400 5.3 Medium 2020-09-09
CVE-2020-2036 PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface — PAN-OS CWE-79 8.8 High 2020-09-09
CVE-2020-2037 PAN-OS: OS command injection vulnerability in the management web interface — PAN-OS CWE-78 7.2 High 2020-09-09
CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions — PAN-OS CWE-20 3.0 Low 2020-08-12
CVE-2020-2034 PAN-OS: OS command injection vulnerability in GlobalProtect portal — PAN-OS CWE-78 8.1 High 2020-07-08

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.