Approved changes feed: RSS · Atom

cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*

part: o version: 7.0.8 update: *

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductPan Os (8e12cd69-24a5-542d-b766-327e8d373bac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9467 vulnerable 2026-06-08 05:10:09.991595 Details available
Cross-site scripting (XSS) vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-08-02T19:00:00.000Z
Updated: 2024-08-05T17:11:01.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9459 vulnerable 2026-06-08 05:10:09.964895 Details available
Cross-site scripting (XSS) vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-08-02T19:00:00.000Z
Updated: 2024-08-05T17:11:01.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9458 vulnerable 2026-06-08 05:10:09.960049 Details available
XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Published: 2017-09-07T13:00:00.000Z
Updated: 2024-08-05T17:11:01.752Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8390 vulnerable 2026-06-08 05:10:08.165125 Details available
The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name.
Published: 2017-08-02T19:00:00.000Z
Updated: 2024-08-05T16:34:22.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7945 vulnerable 2026-06-08 05:10:06.594451 Details available
The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests, aka PAN-SA-2017-0014 and PAN-72769.
Published: 2017-04-29T00:00:00.000Z
Updated: 2024-08-05T16:19:29.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7644 vulnerable 2026-06-08 05:09:56.699098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5584 vulnerable 2026-06-08 05:09:47.265958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5583 vulnerable 2026-06-08 05:09:47.240483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12416 vulnerable 2026-06-08 05:08:46.817871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.