Palo Alto Vulnérabilités

Chronologie

Taper

Produit

Palo Alto PAN-OS174
Palo Alto Networks PAN-OS18
Palo Alto GlobalProtect App14
Palo Alto Cortex XDR Agent14
Palo Alto Networks Cloud NGFW10

Contre-mesures

Official Fix223
Temporary Fix0
Workaround0
Unavailable1
Not Defined40

Exploitabilité

High9
Functional0
Proof-of-Concept19
Unproven1
Not Defined235

Vecteur d'accès

Not Defined0
Physical2
Local44
Adjacent2
Network216

Authentification

Not Defined0
High42
Low124
None98

Interaction de l'utilisateur

Not Defined0
Required45
None219

C3BM Index

CVSSv3 Base

≤10
≤20
≤38
≤426
≤544
≤657
≤747
≤846
≤925
≤1011

CVSSv3 Temp

≤10
≤20
≤39
≤430
≤551
≤649
≤761
≤833
≤920
≤1011

VulDB

≤10
≤22
≤315
≤436
≤551
≤653
≤731
≤845
≤920
≤1011

NVD

≤10
≤20
≤31
≤44
≤514
≤619
≤728
≤836
≤913
≤1016

CNA

≤10
≤20
≤31
≤42
≤515
≤614
≤722
≤812
≤910
≤104

Fournisseur

≤10
≤20
≤31
≤40
≤51
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k70
<2k91
<5k100
<10k0
<25k1
<50k0
<100k1
≥100k1

Exploiter aujourd'hui

<1k258
<2k4
<5k0
<10k0
<25k1
<50k1
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (25): Cloud NGFW (14), Cortex XDR Agent (18), Cortex XSOAR (9), Demisto (1), Expedition (1), Expedition Migration Tool (2), Firewall (1), GlobalProtect (1), Global Protect Agent (2), GlobalProtect Agent (3), GlobalProtect App (15), Global Protected Gateway (1), MineMeld (1), NetConnect (1), Network Traps ESM Console (1), Networks Global Protect Agent (1), Networks Twistlock (1), PAN-OS (192), Prisma Access (14), Prisma Cloud Compute (4), Terminal Services Agent (3), Traps (2), Traps Server (1), VM Series Firewall for Microsoft Azure (1), Web Interface (2)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
10/07/20246.25.9Palo Alto Networks PAN-OS/Cloud NGFW/Prisma Access Physical File System elévation de privilègesFirewall SoftwareNot DefinedOfficial Fix0.000430.08CVE-2024-5913
10/07/20245.35.1Palo Alto Networks Cortex XDR Agent authentification faibleInconnueNot DefinedOfficial Fix0.000430.04CVE-2024-5912
10/07/20247.26.9Palo Alto Networks PAN-OS/Cloud NGFW/Prisma Access elévation de privilègesFirewall SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-5911
10/07/20249.89.4Palo Alto Networks Expedition authentification faibleInconnueNot DefinedOfficial Fix0.000430.04CVE-2024-5910
12/06/20243.33.2Palo Alto Networks GlobalProtect App divulgation de l'informationInconnueNot DefinedOfficial Fix0.000430.06CVE-2024-5908
12/06/20242.42.3Palo Alto Networks Prisma Cloud Compute Web Interface cross site scriptingCloud SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-5906
12/06/20243.33.2Palo Alto Networks Cortex XDR Agent elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.06CVE-2024-5909
12/06/20244.54.3Palo Alto Networks Cortex XDR Agent elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.03CVE-2024-5907
12/06/20243.33.2Palo Alto Networks Cortex XDR Agent elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.00CVE-2024-5905
12/04/20248.98.7Palo Alto Networks PAN-OS GlobalProtect elévation de privilègesFirewall SoftwareHighOfficial Fix0.957740.04CVE-2024-3400
10/04/20244.54.4Palo Alto Networks PAN-OS chiffrement faibleFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-3387
10/04/20244.84.7Palo Alto Networks PAN-OS GlobalProtect Gateway elévation de privilègesFirewall SoftwareNot DefinedOfficial Fix0.000430.05CVE-2024-3388
10/04/20245.35.2Palo Alto Networks PAN-OS vulnérabilité inconnueFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-3386
10/04/20247.57.3Palo Alto Networks PAN-OS Packets dénie de serviceFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-3382
10/04/20247.57.3Palo Alto Networks PAN-OS Packet dénie de serviceFirewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-3385
10/04/20246.16.0Palo Alto Networks PAN-OS Cloud Identity Engine vulnérabilité inconnueFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-3383
10/04/20247.57.3Palo Alto Networks PAN-OS Windows New Technology LAN Manager Packet dénie de serviceFirewall SoftwareNot DefinedOfficial Fix0.000430.06CVE-2024-3384
13/03/20244.54.4Palo Alto GlobalProtect App elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.03CVE-2024-2432
13/03/20245.45.3Palo Alto GlobalProtect App elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.00CVE-2024-2431
13/03/20244.34.2Palo Alto PAN-OS Web Interface elévation de privilègesFirewall SoftwareNot DefinedOfficial Fix0.000430.02CVE-2024-2433
14/02/20243.93.8Palo Alto PAN-OS/Prisma Access/Cloud NGFW cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-0011
14/02/20244.34.2Palo Alto PAN-OS/Prisma Access/Cloud NGFW GlobalProtect Portal cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-0010
14/02/20245.15.1Palo Alto PAN-OS/Prisma Access/Cloud NGFW Management Interface authentification faibleFirewall SoftwareNot DefinedOfficial Fix0.000430.04CVE-2024-0008
14/02/20246.86.7Palo Alto PAN-OS/Prisma Access/Cloud NGFW VPN Connection Remote Code ExecutionFirewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-0009
14/02/20244.64.5Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Web Interface cross site scriptingFirewall SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-0007

239 plus d'entrées ne sont pas affichées

Do you want to use VulDB in your project?

Use the official API to access entries easily!