Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2025-0134 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM — Cortex XDR Broker VM CWE-94 8.8AI High AI 2025-05-14
CVE-2025-0133 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal — Cloud NGFW CWE-79 6.1AI Medium AI 2025-05-14
CVE-2025-0132 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services — Cortex XDR Broker VM CWE-306 5.3AI Medium AI 2025-05-14
CVE-2025-0130 PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets — Cloud NGFW CWE-754 7.5AI High AI 2025-05-14
CVE-2025-0129 Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser — Prisma Access Browser CWE-754 8.8AI High AI 2025-04-11
CVE-2025-0123 PAN-OS: Information Disclosure Vulnerability in HTTP/2 Packet Captures — Cloud NGFW CWE-312 4.9AI Medium AI 2025-04-11
CVE-2025-0119 Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM — Cortex XDR Broker VM CWE-78 8.8AI High AI 2025-04-11
CVE-2025-0128 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet — Cloud NGFW CWE-754 7.5AI High AI 2025-04-11
CVE-2025-0127 PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series — Cloud NGFW CWE-78 7.2AI High AI 2025-04-11
CVE-2025-0126 PAN-OS: Session Fixation Vulnerability in GlobalProtect SAML Login — Cloud NGFW CWE-384 8.8AI High AI 2025-04-11
CVE-2025-0125 PAN-OS: Improper Neutralization of Input in the Management Web Interface — Cloud NGFW CWE-83 7.2AI High AI 2025-04-11
CVE-2025-0124 PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface — Cloud NGFW CWE-73 7.1AI High AI 2025-04-11
CVE-2025-0122 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets — Prisma SD-WAN CWE-770 6.5AI Medium AI 2025-04-11
CVE-2025-0121 Cortex XDR Agent: Local Windows User Can Crash the Agent — Cortex XDR Agent CWE-476 7.1AI High AI 2025-04-11
CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-250 7.0AI High AI 2025-04-11
CVE-2025-0118 GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability — GlobalProtect App CWE-618 8.8 - 2025-03-12
CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-807 7.8 - 2025-03-12
CVE-2025-0116 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame — PAN-OS CWE-754 6.5 - 2025-03-12
CVE-2025-0115 PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI — PAN-OS CWE-41 4.9 - 2025-03-12
CVE-2025-0114 PAN-OS: Denial of Service (DoS) in GlobalProtect — PAN-OS CWE-400 7.5 - 2025-03-12
CVE-2025-0112 Cortex XDR Agent: Local Windows User Can Disable the Agent — Cortex XDR Agent CWE-754 7.8 - 2025-02-19
CVE-2025-0113 Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers — Cortex XDR Broker VM CWE-424 7.4 - 2025-02-12
CVE-2025-0110 PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin — PAN-OS OpenConfig Plugin CWE-78 7.2 - 2025-02-12
CVE-2025-0111 PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface — Cloud NGFW CWE-73 6.5 - 2025-02-12
CVE-2025-0109 PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface — Cloud NGFW CWE-73 9.1 - 2025-02-12
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface — Cloud NGFW CWE-306 9.8 - 2025-02-12
CVE-2025-0107 Expedition: OS Command Injection Vulnerability — Cloud NGFW CWE-78 10.0 - 2025-01-11
CVE-2025-0106 Expedition: Wildcard Expansion Vulnerability — Cloud NGFW CWE-155 5.8 - 2025-01-11
CVE-2025-0105 Expedition: Arbitrary File Deletion Vulnerability — Cloud NGFW CWE-73 10.0 - 2025-01-11
CVE-2025-0104 Expedition: Cross-Site Scripting (XSS) Vulnerability — Cloud NGFW CWE-79 6.1 - 2025-01-11

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.