Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Palo Alto Networks — Vulnerabilities & Security Advisories 280

Browse all 280 CVE security advisories affecting Palo Alto Networks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Palo Alto Networks:PAN-OSCloud NGFWGlobalProtect AppCortex XDR AgentCortex XSOARCortex XDR Broker VMExpeditionPrisma Cloud ComputeGlobal Protect AgentPrisma BrowserTrapsCheckov by Prisma CloudAutonomous Digital Experience ManagerPrisma Access BrowserPalo Alto Networks PAN-OSBridgecrew CheckovPalo Alto Networks ExpeditionPrisma Cloud Compute EditionUser-ID Credential AgentPrisma SD-WANCortex XDR Microsoft 365 Defender PackPAN-OS OpenConfig PluginCortex XSOAR Microsoft Teams MarketplaceActiveMQ Content PackCortex XSOAR CommonScriptsVM-Series PluginGlobalProtectGlobalProtect Agent for Linux and OSXGlobalProtect Agent for WindowsMineMeld
CVE IDTitleCVSSSeverityPublished
CVE-2020-2002 PAN-OS: Spoofed Kerberos key distribution center authentication bypass — PAN-OSCWE-290 8.1 High2020-05-13
CVE-2020-2003 PAN-OS: Authenticated administrator can delete arbitrary system file — PAN-OSCWE-73 6.5 Medium2020-05-13
CVE-2020-2004 GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs — GlobalProtect AppCWE-534 6.8 Medium2020-05-13
CVE-2020-2005 PAN-OS: GlobalProtect Clientless VPN session hijacking — PAN-OSCWE-79 7.1 High2020-05-13
CVE-2020-2006 PAN-OS: Buffer overflow in management server payload parser — PAN-OSCWE-121 7.2 High2020-05-13
CVE-2020-2007 PAN-OS: OS command injection in management server — PAN-OSCWE-78 7.2 High2020-05-13
CVE-2020-2008 PAN-OS: OS command injection or arbitrary file deletion vulnerability — PAN-OSCWE-73 7.2 High2020-05-13
CVE-2020-2009 PAN-OS: Panorama SD WAN arbitrary file creation — PAN-OSCWE-73 7.2 High2020-05-13
CVE-2020-2010 PAN-OS: Authenticated user command injection vulnerability — PAN-OSCWE-78 7.2 High2020-05-13
CVE-2020-1991 Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows — TrapsCWE-377 7.8 High2020-04-08
CVE-2020-1992 PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation — PAN-OSCWE-134 8.1 High2020-04-08
CVE-2020-1978 VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs — VM-Series PluginCWE-255 5.8 Medium2020-04-08
CVE-2020-1987 Global Protect Agent: VPN cookie local information disclosure — Global Protect AgentCWE-200 3.9 Low2020-04-08
CVE-2020-1988 Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability — Global Protect AgentCWE-428 4.2 Medium2020-04-08
CVE-2020-1989 Global Protect Agent: Incorrect privilege assignment allows local privilege escalation — Global Protect AgentCWE-266 7.0 High2020-04-08
CVE-2020-1990 PAN-OS: Buffer overflow in the management server — PAN-OSCWE-121 7.2 High2020-04-08
CVE-2020-1979 PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation — PAN-OSCWE-134 8.1 High2020-03-11
CVE-2020-1980 PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands — PAN-OSCWE-77 7.8 High2020-03-11
CVE-2020-1981 PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation — PAN-OSCWE-377 7.0 High2020-03-11
CVE-2020-1975 Missing XML Validation in PAN-OS Web Interface — PAN-OSCWE-112 6.8 Medium2020-02-12
CVE-2020-1976 GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability. — GlobalProtectCWE-642 4.7 Medium2020-02-12
CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection. — ExpeditionCWE-352 7.5 High2020-02-12
CVE-2019-17440 PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access — PAN-OSCWE-923 10.0 Critical2019-12-20
CVE-2019-17437 PAN-OS: Custom-role users may escalate privileges — PAN-OSCWE-280 7.8 High2019-12-05
CVE-2019-17435 Palo Alto Networks GlobalProtect agent 安全漏洞 — GlobalProtect Agent for Windows 7.8 -2019-10-16
CVE-2019-17436 Palo Alto Networks GlobalProtect agent 安全漏洞 — GlobalProtect Agent for Linux and OSX 7.1 -2019-10-16
CVE-2019-1581 PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface — PAN-OSCWE-78 9.8 Critical2019-08-23
CVE-2019-1578 Palo Alto Networks MineMeld 跨站脚本漏洞 — MineMeld 6.1 -2019-07-01
CVE-2019-1577 Palo Alto Networks Traps 代码注入漏洞 — Traps 5.4 -2019-07-01
CVE-2019-1568 Palo Alto Networks Demisto 跨站脚本漏洞 — Demisto 6.1 -2019-05-09

This page lists every published CVE security advisory associated with Palo Alto Networks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.