Class familyPalo Alto Networks · PAN-OS
Palo Alto Networks PAN-OS input validation flaws, 2017–2024
6 PAN-OS CVEs with CWE-20 weaknesses, 11 Dec 2017 to 10 Jul 2024. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2017’17
2018’18
2019’19
2 2020’20
2021’21
2022’22
2023’23
3 2024’24
In CISA KEVNot in KEV
20171 CVE, 1 in KEV
20202 CVEs
20243 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2017-15944KEV | 11 Dec 2017 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | Grouped by weakness | 69.8 |
| CVE-2020-2011 | 13 May 2020 | PAN-OS: Panorama registration denial of service | Grouped by weakness | 21.2 |
| CVE-2020-2000 | 12 Nov 2020 | PAN-OS: OS command injection and memory corruption vulnerability | Grouped by weakness | 22.8 |
| CVE-2024-3385 | 10 Apr 2024 | PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled | Grouped by weakness | 17.2 |
| CVE-2024-3400KEV | 12 Apr 2024 | Palo Alto Networks PAN-OS Command Injection Vulnerability | Grouped by weakness | 87.7 |
| CVE-2024-5913 | 10 Jul 2024 | PAN-OS: Improper Input Validation Vulnerability in PAN-OS | Grouped by weakness | 7.1 |