Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Palo Alto Networks — Vulnerabilities & Security Advisories 364

Browse all 364 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Palo Alto Networks operates as a prominent cybersecurity vendor, primarily providing next-generation firewalls, cloud security solutions, and endpoint protection platforms to enterprise clients. The company’s software ecosystem, particularly its PAN-OS operating system, has historically been associated with a significant volume of Common Vulnerabilities and Exposures, currently totaling 280 recorded instances. These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation errors or improper access controls within management interfaces. While the firm maintains a robust security posture through regular patching cycles and proactive threat intelligence integration, the high CVE count reflects the complexity of its extensive feature set and the broad attack surface inherent in critical infrastructure components. Major incidents have been limited, with most issues resolved via timely updates, though the sheer number of disclosed flaws underscores the challenges of securing large-scale, continuously updated network security appliances.

CVE ID Title CVSS Severity Published
CVE-2022-0018 GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled — GlobalProtect App CWE-201 6.1 Medium 2022-02-10
CVE-2022-0017 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation — GlobalProtect App CWE-59 7.0 High 2022-02-10
CVE-2022-0016 GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon — GlobalProtect App CWE-703 7.4 High 2022-02-10
CVE-2022-0011 PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering — PAN-OS CWE-436 6.5 Medium 2022-02-10
CVE-2022-0015 Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability — Cortex XDR Agent CWE-427 7.8 High 2022-01-12
CVE-2022-0014 Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session — Cortex XDR Agent CWE-426 6.7 Medium 2022-01-12
CVE-2022-0013 Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File — Cortex XDR Agent CWE-538 5.0 Medium 2022-01-12
CVE-2022-0012 Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability — Cortex XDR Agent CWE-59 6.1 Medium 2022-01-12
CVE-2021-3064 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces — PAN-OS CWE-121 9.8 Critical 2021-11-10
CVE-2021-3063 PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces — PAN-OS CWE-755 7.5 High 2021-11-10
CVE-2021-3062 PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users — PAN-OS CWE-284 8.1 High 2021-11-10
CVE-2021-3061 PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) — PAN-OS CWE-78 6.4 Medium 2021-11-10
CVE-2021-3060 PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) — PAN-OS CWE-78 8.1 High 2021-11-10
CVE-2021-3059 PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates — PAN-OS CWE-78 8.1 High 2021-11-10
CVE-2021-3058 PAN-OS: OS Command Injection Vulnerability in Web Interface XML API — PAN-OS CWE-78 8.8 High 2021-11-10
CVE-2021-3056 PAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authentication — PAN-OS CWE-120 8.8 High 2021-11-10
CVE-2021-3057 GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway — GlobalProtect App CWE-121 8.1 High 2021-10-13
CVE-2021-3055 PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web Interface — PAN-OS CWE-611 6.5 Medium 2021-09-08
CVE-2021-3054 PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition Vulnerability — PAN-OS CWE-367 7.2 High 2021-09-08
CVE-2021-3053 PAN-OS: Exceptional Condition Denial-of-Service (DoS) — PAN-OS CWE-755 7.5 High 2021-09-08
CVE-2021-3052 PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface — PAN-OS CWE-79 8.0 High 2021-09-08
CVE-2021-3051 Cortex XSOAR: Authentication Bypass in SAML Authentication — Cortex XSOAR CWE-347 8.1 High 2021-09-08
CVE-2021-3049 Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability — Cortex XSOAR CWE-285 2.6 Low 2021-09-08
CVE-2021-3050 PAN-OS: OS Command Injection Vulnerability in Web Interface — PAN-OS CWE-78 8.8 High 2021-08-11
CVE-2021-3048 PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage — PAN-OS CWE-20 5.9 Medium 2021-08-11
CVE-2021-3047 PAN-OS: Weak Cryptography Used in Web Interface Authentication — PAN-OS CWE-338 4.2 Medium 2021-08-11
CVE-2021-3046 PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal — PAN-OS CWE-287 6.8 Medium 2021-08-11
CVE-2021-3045 PAN-OS: OS Command Argument Injection in Web Interface — PAN-OS CWE-88 4.9 Medium 2021-08-11
CVE-2021-3043 Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console — Prisma Cloud Compute CWE-79 7.5 High 2021-07-15
CVE-2021-3042 Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation — Cortex XDR Agent CWE-427 7.8 High 2021-07-15

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.