Vulnerabilidades em Palo Alto Networks

364 resultados
Análise Vexday

Das 316 CVEs catalogadas para Palo Alto Networks, 13 estão confirmadas em exploração ativa no catálogo KEV da CISA, representando uma taxa 9,1 vezes acima da média geral do catálogo — sinal de que vulnerabilidades nesse vendor atraem exploração real com frequência desproporcional. A CVE mais crítica em atividade é a CVE-2024-3400, que atingiu EPSS máximo de 1,0, indicando probabilidade extremamente elevada de exploração observada ou iminente. O tipo de falha mais recorrente é CWE-78 (injeção de comandos no sistema operacional), uma classe de vulnerabilidade com alto potencial de impacto em appliances de segurança de perímetro. Com 17 CVEs críticas, 15 com PoC pública e 39 surgidas nos últimos 90 dias, equipes responsáveis por ambientes que utilizam produtos Palo Alto Networks devem priorizar ciclos curtos de patching e monitorar ativamente os indicadores de exploração.

CVE-2022-0017HIGHGlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationEPSS 0.3%CVE-2019-1573LOWInformation Disclosure in GlobalProtect AgentEPSS 0.3%CVE-2020-1989HIGHGlobal Protect Agent: Incorrect privilege assignment allows local privilege escalationEPSS 0.3%CVE-2026-0316LOWPAN-OS: Stored Cross-Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2023-0005MEDIUMPAN-OS: Exposure of Sensitive Information VulnerabilityEPSS 0.3%CVE-2026-0272MEDIUMPAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)EPSS 0.3%CVE-2025-4614MEDIUMPAN-OS: Session Token Disclosure VulnerabilityEPSS 0.3%CVE-2026-0296MEDIUMGlobalProtect App: Improper Certificate Validation Bypass VulnerabilityEPSS 0.3%CVE-2021-3037LOWPAN-OS: Secrets for scheduled configuration exports are logged in system logsEPSS 0.3%CVE-2022-0014MEDIUMCortex XDR Agent: Unintended Program Execution When Using Live Terminal SessionEPSS 0.3%CVE-2024-5916MEDIUMPAN-OS: Cleartext Exposure of External System SecretsEPSS 0.2%CVE-2021-3036MEDIUMPAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectlyEPSS 0.2%CVE-2021-3042HIGHCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege EscalationEPSS 0.2%CVE-2026-0242MEDIUMTrust Protection Foundation: SQL Injection VulnerabilityEPSS 0.2%CVE-2021-3041HIGHCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalationEPSS 0.2%CVE-2024-5906MEDIUMPrisma Cloud Compute: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfaceEPSS 0.2%CVE-2022-0025MEDIUMCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2022-0012MEDIUMCortex XDR Agent: Local Arbitrary File Deletion VulnerabilityEPSS 0.2%CVE-2026-0240MEDIUMTrust Protection Foundation: Sensitive Information Disclosure VulnerabilityEPSS 0.2%