Palo Alto Networks PAN-OS 11.0.4 -
Approved changes feed: RSS · Atom
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:*
part: o version: 11.0.4 update: -
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Pan Os (8e12cd69-24a5-542d-b766-327e8d373bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9468 |
vulnerable | 2026-06-08 07:00:27.799193 |
PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
Published: 2024-10-09T17:05:29.055Z
Updated: 2025-04-30T18:37:25.963Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9468 |
not_vulnerable | 2026-06-08 07:00:27.729361 |
PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted Packet
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
Published: 2024-10-09T17:05:29.055Z
Updated: 2025-04-30T18:37:25.963Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5920 |
not_vulnerable | 2026-06-08 06:56:17.920015 |
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3400 |
vulnerable | 2026-06-08 06:41:53.248916 |
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CRITICAL (10)
A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.
Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
Published: 2024-04-12T07:20:00.707Z
Updated: 2025-10-21T23:05:21.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2552 |
vulnerable | 2026-06-08 06:33:31.525476 |
PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.
Published: 2024-11-14T09:39:06.523Z
Updated: 2024-11-14T19:08:21.217Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2551 |
not_vulnerable | 2026-06-08 06:33:31.461764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2550 |
not_vulnerable | 2026-06-08 06:33:31.355602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0012 |
vulnerable | 2026-06-08 06:21:57.760426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.