Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2025-0103 Expedition: SQL Injection Vulnerability — Cloud NGFW CWE-89 8.1 - 2025-01-11
CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet — Cloud NGFW CWE-754 7.5 - 2024-12-27
CVE-2024-5921 GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation — GlobalProtect App CWE-295 8.0AI High AI 2024-11-27
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface — Cloud NGFW CWE-78 5.9 Medium 2024-11-18
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) — Cloud NGFW CWE-306 5.9 Medium 2024-11-18
CVE-2024-2550 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet — Cloud NGFW CWE-476 7.5AI High AI 2024-11-14
CVE-2024-5920 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator — Cloud NGFW CWE-79 4.8AI Medium AI 2024-11-14
CVE-2024-5917 PAN-OS: Server-Side Request Forgery in WildFire — Cloud NGFW CWE-918 5.3AI Medium AI 2024-11-14
CVE-2024-2552 PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI) — Cloud NGFW CWE-22 6.5AI Medium AI 2024-11-14
CVE-2024-5918 PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User — Cloud NGFW CWE-295 8.1AI High AI 2024-11-14
CVE-2024-5919 PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability — Cloud NGFW CWE-611 7.7AI High AI 2024-11-14
CVE-2024-2551 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet — Cloud NGFW CWE-476 7.5AI High AI 2024-11-14
CVE-2024-9472 PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic — Cloud NGFW CWE-476 7.5AI High AI 2024-11-14
CVE-2024-9473 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-250 7.8AI High AI 2024-10-09
CVE-2024-9471 PAN-OS: Privilege Escalation (PE) Vulnerability in XML API — PAN-OS CWE-269 7.2AI High AI 2024-10-09
CVE-2024-9470 Cortex XSOAR: Information Disclosure Vulnerability — Cortex XSOAR CWE-497 4.3AI Medium AI 2024-10-09
CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent — Cortex XDR Agent CWE-754 7.8AI High AI 2024-10-09
CVE-2024-9468 PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet — Cloud NGFW CWE-787 7.5AI High AI 2024-10-09
CVE-2024-9467 Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure — Expedition CWE-79 6.1AI Medium AI 2024-10-09
CVE-2024-9466 Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure — Expedition CWE-532 8.1AI High AI 2024-10-09
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure — Expedition CWE-89 9.1AI Critical AI 2024-10-09
CVE-2024-9464 Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure — Expedition CWE-78 9.9AI Critical AI 2024-10-09
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure — Expedition CWE-78 10.0AI Critical AI 2024-10-09
CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal — PAN-OS CWE-863 6.5AI Medium AI 2024-09-11
CVE-2024-8690 Cortex XDR Agent: Local Windows Administrator Can Disable the Agent — Cortex XDR Agent CWE-440 6.7AI Medium AI 2024-09-11
CVE-2024-8689 ActiveMQ Content Pack: Cleartext Exposure of Credentials — ActiveMQ Content Pack CWE-312 7.5AI High AI 2024-09-11
CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI) — PAN-OS CWE-155 4.9AI Medium AI 2024-09-11
CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes — PAN-OS CWE-497 9.8AI Critical AI 2024-09-11
CVE-2024-8686 PAN-OS: Command Injection Vulnerability — PAN-OS CWE-78 7.2AI High AI 2024-09-11
CVE-2024-5916 PAN-OS: Cleartext Exposure of External System Secrets — PAN-OS CWE-313 4.4AI Medium AI 2024-08-14

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.