Class familyPalo Alto Networks · PAN-OS
Palo Alto Networks PAN-OS OS command injection flaws, 2019–2024
20 PAN-OS CVEs with CWE-78 weaknesses, 23 Aug 2019 to 18 Nov 2024. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2019’19
11 2020’20
5 2021’21
2022’22
1 2023’23
2 2024’24
In CISA KEVNot in KEV
20191 CVE
202011 CVEs
20215 CVEs
20231 CVE
20242 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-1581 | 23 Aug 2019 | PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface | Grouped by weakness | 24.5 |
| CVE-2020-2007 | 13 May 2020 | PAN-OS: OS command injection in management server | Grouped by weakness | 21.6 |
| CVE-2020-2008 | 13 May 2020 | PAN-OS: OS command injection or arbitrary file deletion vulnerability | Grouped by weakness | 22.3 |
| CVE-2020-2010 | 13 May 2020 | PAN-OS: Authenticated user command injection vulnerability | Grouped by weakness | 21.6 |
| CVE-2020-2014 | 13 May 2020 | PAN-OS: OS injection vulnerability in PAN-OS management server | Grouped by weakness | 23.3 |
| CVE-2020-2028 | 10 Jun 2020 | PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification | Grouped by weakness | 20.7 |
| CVE-2020-2029 | 10 Jun 2020 | PAN-OS: OS command injection vulnerability in management interface certificate generator | Grouped by weakness | 20.7 |
| CVE-2020-2030 | 8 Jul 2020 | PAN-OS: OS command injection vulnerability in the management interface | Grouped by weakness | 22.0 |
| CVE-2020-2034 | 8 Jul 2020 | PAN-OS: OS command injection vulnerability in GlobalProtect portal | Grouped by weakness | 65.9 |
| CVE-2020-2037 | 9 Sep 2020 | PAN-OS: OS command injection vulnerability in the management web interface | Grouped by weakness | 22.9 |
| CVE-2020-2038 | 9 Sep 2020 | PAN-OS: OS command injection vulnerability in the management web interface | Grouped by weakness | 31.4 |
| CVE-2020-2000 | 12 Nov 2020 | PAN-OS: OS command injection and memory corruption vulnerability | Grouped by weakness | 22.8 |
| CVE-2021-3050 | 11 Aug 2021 | PAN-OS: OS Command Injection Vulnerability in Web Interface | Grouped by weakness | 21.8 |
| CVE-2021-3058 | 10 Nov 2021 | PAN-OS: OS Command Injection Vulnerability in Web Interface XML API | Grouped by weakness | 21.5 |
| CVE-2021-3059 | 10 Nov 2021 | PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates | Grouped by weakness | 20.6 |
| CVE-2021-3060 | 10 Nov 2021 | PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) | Grouped by weakness | 30.3 |
| CVE-2021-3061 | 10 Nov 2021 | PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) | Grouped by weakness | 16.2 |
| CVE-2023-6795 | 13 Dec 2023 | PAN-OS: OS Command Injection Vulnerability in the Web Interface | Grouped by weakness | 17.2 |
| CVE-2024-8686 | 11 Sep 2024 | PAN-OS: Command Injection Vulnerability | Grouped by weakness | 20.5 |
| CVE-2024-9474KEV | 18 Nov 2024 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability | Grouped by weakness | 78.0 |