Palo Alto Vulnerabilidades

Curso de tempo

Tipo

Produto

Palo Alto PAN-OS174
Palo Alto GlobalProtect App14
Palo Alto Cortex XDR Agent14
Palo Alto Cortex XSOAR9
Palo Alto Networks PAN-OS8

Medidas

Official Fix206
Temporary Fix0
Workaround0
Unavailable1
Not Defined40

Explorabilidade

High5
Functional0
Proof-of-Concept18
Unproven1
Not Defined223

Tipo de acesso

Not Defined0
Physical1
Local39
Adjacent2
Network205

Autenticação

Not Defined0
High39
Low118
None90

Actividade do utilizador

Not Defined0
Required44
None203

C3BM Index

CVSSv3 Base

≤10
≤20
≤37
≤423
≤542
≤655
≤745
≤841
≤924
≤1010

CVSSv3 Temp

≤10
≤20
≤38
≤427
≤548
≤646
≤759
≤830
≤919
≤1010

VulDB

≤10
≤22
≤314
≤432
≤549
≤650
≤730
≤841
≤919
≤1010

NVD

≤10
≤20
≤31
≤44
≤514
≤619
≤728
≤836
≤913
≤1016

CNA

≤10
≤20
≤31
≤41
≤512
≤611
≤719
≤85
≤99
≤103

Fabricante

≤10
≤20
≤31
≤40
≤51
≤60
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explorar 0 dia

<1k60
<2k82
<5k102
<10k0
<25k1
<50k0
<100k1
≥100k1

Explorar hoje

<1k239
<2k5
<5k1
<10k0
<25k1
<50k1
<100k0
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (24): Cloud NGFW (12), Cortex XDR Agent (14), Cortex XSOAR (9), Demisto (1), Expedition Migration Tool (2), Firewall (1), GlobalProtect (1), Global Protect Agent (2), GlobalProtect Agent (3), GlobalProtect App (14), Global Protected Gateway (1), MineMeld (1), NetConnect (1), Network Traps ESM Console (1), Networks Global Protect Agent (1), Networks Twistlock (1), PAN-OS (182), Prisma Access (12), Prisma Cloud Compute (3), Terminal Services Agent (3), Traps (2), Traps Server (1), VM Series Firewall for Microsoft Azure (1), Web Interface (2)

Link to Vendor Website: https://www.paloaltonetworks.com/

Publicado emBaseTempVulnerabilidadeProdExpMasCTIEPSSCVE
13/03/20244.54.4Palo Alto GlobalProtect App direitos alargadosDesconhecidoNot DefinedOfficial Fix0.040.00043CVE-2024-2432
13/03/20245.45.3Palo Alto GlobalProtect App direitos alargadosDesconhecidoNot DefinedOfficial Fix0.030.00043CVE-2024-2431
13/03/20244.34.2Palo Alto PAN-OS Web Interface direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.000.00043CVE-2024-2433
14/02/20243.93.8Palo Alto PAN-OS/Prisma Access/Cloud NGFW Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedOfficial Fix0.080.00043CVE-2024-0011
14/02/20244.34.2Palo Alto PAN-OS/Prisma Access/Cloud NGFW GlobalProtect Portal Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedOfficial Fix0.080.00043CVE-2024-0010
14/02/20245.15.1Palo Alto PAN-OS/Prisma Access/Cloud NGFW Management Interface Fraca autenticaçãoFirewall SoftwareNot DefinedOfficial Fix0.020.00043CVE-2024-0008
14/02/20246.86.7Palo Alto PAN-OS/Prisma Access/Cloud NGFW VPN Connection Remote Code ExecutionFirewall SoftwareNot DefinedOfficial Fix0.040.00043CVE-2024-0009
14/02/20244.64.5Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Web Interface Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedOfficial Fix0.030.00043CVE-2024-0007
13/12/20233.83.8Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Web Interface Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedOfficial Fix0.040.00045CVE-2023-6789
13/12/20236.46.3Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Link Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedOfficial Fix0.030.00059CVE-2023-6790
13/12/20232.72.6Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW XML API Key direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.030.00044CVE-2023-6793
13/12/20235.04.9Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Web Interface direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.040.00049CVE-2023-6794
13/12/20235.55.4Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW XML API direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.040.00049CVE-2023-6792
13/12/20235.04.9Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.030.00049CVE-2023-6795
13/12/20233.83.7Palo Alto Networks PAN-OS/Prisma Access/Cloud NGFW Web Interface Divulgação de InformaçãoFirewall SoftwareNot DefinedOfficial Fix0.000.00049CVE-2023-6791
08/11/20236.46.2Palo Alto Cortex XSOAR direitos alargadosDesconhecidoNot DefinedOfficial Fix0.020.00042CVE-2023-3282
14/09/20234.44.4Palo Alto Cortex XDR Agent direitos alargadosDesconhecidoNot DefinedNot Defined0.040.00042CVE-2023-3280
12/07/20235.05.0Palo Alto PAN-OS Configuration direitos alargadosFirewall SoftwareNot DefinedOfficial Fix0.030.00068CVE-2023-38046
14/06/20237.47.4Palo Alto GlobalProtect App Local Privilege EscalationDesconhecidoNot DefinedNot Defined0.020.00042CVE-2023-0009
14/06/20234.84.8Palo Alto PAN-OS Captive Portal Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedNot Defined0.000.00045CVE-2023-0010
10/05/20234.64.6Palo Alto PAN-OS Web Interface Roteiro Cruzado de SítiosFirewall SoftwareNot DefinedNot Defined0.030.00045CVE-2023-0007
10/05/20233.33.3Palo Alto PAN-OS Web Interface Condição de CorridaFirewall SoftwareNot DefinedNot Defined0.030.00068CVE-2023-0008
12/04/20236.76.7Palo Alto GlobalProtect App Condição de CorridaDesconhecidoNot DefinedNot Defined0.030.00042CVE-2023-0006
12/04/20233.63.6Palo Alto PAN-OS Divulgação de InformaçãoFirewall SoftwareNot DefinedNot Defined0.000.00050CVE-2023-0005
12/04/20234.94.9Palo Alto PAN-OS vulnerabilidade desconhecidaFirewall SoftwareNot DefinedNot Defined0.040.00069CVE-2023-0004

222 as entradas adicionais não são mais exibidas

Do you need the next level of professionalism?

Upgrade your account now!