Vulnerabilities in Palo Alto Networks

364 results
CVE-2020-1998MEDIUMPAN-OS: Improper SAML SSO authorization of shared local usersEPSS 0.9%CVE-2019-1577—Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScripEPSS 0.9%CVE-2024-3384HIGHPAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsEPSS 0.9%CVE-2019-1568—Cross-site scripting (XSS) vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrarEPSS 0.9%CVE-2020-2033MEDIUMGlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookieEPSS 0.9%CVE-2021-3061MEDIUMPAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)EPSS 0.9%CVE-2020-2005HIGHPAN-OS: GlobalProtect Clientless VPN session hijackingEPSS 0.9%CVE-2021-3048MEDIUMPAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall OutageEPSS 0.8%CVE-2026-0320MEDIUMPAN-OS: Authenticated Admin Command Injection VulnerabilityEPSS 0.8%CVE-2026-0313MEDIUMCortex XSOAR: OS Command Injection VulnerabilityEPSS 0.8%CVE-2026-0288HIGHPAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server AgentEPSS 0.8%CVE-2020-2017HIGHPAN-OS: DOM-Based cross site scripting vulnerability in management web interfaceEPSS 0.8%CVE-2021-3045MEDIUMPAN-OS: OS Command Argument Injection in Web InterfaceEPSS 0.8%CVE-2026-0309MEDIUMPAN-OS: Authenticated Command Injection in CLI with Luna HSM ConfigurationEPSS 0.8%CVE-2025-4615MEDIUMPAN-OS: Improper Neutralization of Input in the Management Web InterfaceEPSS 0.8%CVE-2020-2035LOWPAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessionsEPSS 0.8%CVE-2026-0302LOWCheckov by Prisma Cloud: OS Command Injection VulnerabilityEPSS 0.8%CVE-2026-0279LOWPAN-OS: Multiple Cross-Site Scripting (XSS) VulnerabilitiesEPSS 0.8%CVE-2022-0018MEDIUMGlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On EnabledEPSS 0.7%CVE-2026-0227MEDIUMPAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and PortalEPSS 0.7%