Palo Alto Networks PAN-OS 11.0.2 H1
Approved changes feed: RSS · Atom
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:*
part: o version: 11.0.2 update: h1
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Pan Os (8e12cd69-24a5-542d-b766-327e8d373bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9471 |
not_vulnerable | 2026-06-08 07:00:27.821585 |
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key to perform actions as a higher privileged PAN-OS administrator. For example, an administrator with "Virtual system administrator (read-only)" access could use an XML API key of a "Virtual system administrator" to perform write operations on the virtual system configuration even though they should be limited to read-only operations.
Published: 2024-10-09T17:06:41.456Z
Updated: 2024-10-18T11:58:13.115Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5920 |
not_vulnerable | 2026-06-08 06:56:17.935977 |
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5918 |
not_vulnerable | 2026-06-08 06:56:17.779611 |
PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate."
Published: 2024-11-14T09:38:29.319Z
Updated: 2024-11-14T19:35:53.159Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3400 |
vulnerable | 2026-06-08 06:41:53.245204 |
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CRITICAL (10)
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.
Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
Published: 2024-04-12T07:20:00.707Z
Updated: 2025-10-21T23:05:21.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2552 |
vulnerable | 2026-06-08 06:33:31.526415 |
PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.
Published: 2024-11-14T09:39:06.523Z
Updated: 2024-11-14T19:08:21.217Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2551 |
not_vulnerable | 2026-06-08 06:33:31.462657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2550 |
not_vulnerable | 2026-06-08 06:33:31.365930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0012 |
vulnerable | 2026-06-08 06:21:57.780557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.