Palo Alto Networks PAN-OS 11.0.3 H3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:*

part: o version: 11.0.3 update: h3

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductPan Os (8e12cd69-24a5-542d-b766-327e8d373bac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5920 not_vulnerable 2026-06-08 06:56:17.926407 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3400 vulnerable 2026-06-08 06:41:53.247935 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CRITICAL (10)
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
Published: 2024-04-12T07:20:00.707Z
Updated: 2025-10-21T23:05:21.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2552 vulnerable 2026-06-08 06:33:31.526002 PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.
Published: 2024-11-14T09:39:06.523Z
Updated: 2024-11-14T19:08:21.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2551 not_vulnerable 2026-06-08 06:33:31.462372 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Published: 2024-11-14T09:36:09.876Z
Updated: 2024-11-19T15:01:40.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2550 not_vulnerable 2026-06-08 06:33:31.361622 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Published: 2024-11-14T09:40:38.838Z
Updated: 2024-11-14T14:11:24.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0012 vulnerable 2026-06-08 06:21:57.774712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.