Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2023-6795 PAN-OS: OS Command Injection Vulnerability in the Web Interface — PAN-OS CWE-78 5.5 Medium 2023-12-13
CVE-2023-6794 PAN-OS: File Upload Vulnerability in the Web Interface — PAN-OS CWE-434 5.5 Medium 2023-12-13
CVE-2023-6792 PAN-OS: OS Command Injection Vulnerability in the XML API — PAN-OS CWE-88 5.5 Medium 2023-12-13
CVE-2023-6790 PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface — PAN-OS CWE-79 8.8 High 2023-12-13
CVE-2023-3282 Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine — Cortex XSOAR CWE-732 6.4 Medium 2023-11-08
CVE-2023-3280 Cortex XDR Agent: Local Windows User Can Disable the Agent — Cortex XDR Agent CWE-755 5.5 Medium 2023-09-13
CVE-2023-38046 PAN-OS: Read System Files and Resources During Configuration Commit — PAN-OS CWE-610 5.5 Medium 2023-07-12
CVE-2023-0009 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability — GlobalProtect App CWE-807 7.8 High 2023-06-14
CVE-2023-0010 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication — PAN-OS CWE-79 5.4 Medium 2023-06-14
CVE-2023-0008 PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface — PAN-OS CWE-73 4.4 Medium 2023-05-10
CVE-2023-0007 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface — PAN-OS CWE-80 6.5 Medium 2023-05-10
CVE-2023-0006 GlobalProtect App: Local File Deletion Vulnerability — GlobalProtect app CWE-367 6.3 Medium 2023-04-12
CVE-2023-0005 PAN-OS: Exposure of Sensitive Information Vulnerability — PAN-OS CWE-497 4.1 Medium 2023-04-12
CVE-2023-0004 PAN-OS: Local File Deletion Vulnerability — PAN-OS CWE-703 6.5 Medium 2023-04-12
CVE-2023-0003 Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server — Cortex XSOAR CWE-73 6.5 Medium 2023-02-08
CVE-2023-0002 Cortex XDR Agent: Product Disruption by Local Windows User — Cortex XDR agent CWE-693 5.5 Medium 2023-02-08
CVE-2023-0001 Cortex XDR Agent: Cleartext Exposure of Agent Admin Password — Cortex XDR agent CWE-319 6.0 Medium 2023-02-08
CVE-2022-0031 Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine — Cortex XSOAR CWE-345 6.7 Medium 2022-11-09
CVE-2022-0030 PAN-OS: Authentication Bypass in Web Interface — PAN-OS CWE-290 8.1 High 2022-10-12
CVE-2022-0029 Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File — Cortex XDR Agent CWE-59 5.5 Medium 2022-09-14
CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering — Cloud NGFW CWE-406 8.6 High 2022-08-10
CVE-2022-0027 Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports — Cortex XSOAR CWE-285 4.3 Medium 2022-05-11
CVE-2022-0026 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability — Cortex XDR Agent CWE-282 6.7 Medium 2022-05-11
CVE-2022-0025 Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability — Cortex XDR Agent CWE-427 6.7 Medium 2022-05-11
CVE-2022-0024 PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit — PAN-OS CWE-138 7.2 High 2022-05-11
CVE-2022-0023 PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy — PAN-OS CWE-755 5.9 Medium 2022-04-13
CVE-2022-0022 PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes — PAN-OS CWE-916 4.1 Medium 2022-03-09
CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon — GlobalProtect App CWE-532 3.3 Low 2022-02-10
CVE-2022-0020 Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface — Cortex XSOAR CWE-79 6.8 Medium 2022-02-10
CVE-2022-0019 GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux — GlobalProtect App CWE-522 4.7 Medium 2022-02-10

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.