Palo Alto Networks PAN-OS 11.1.0 H3
Approved changes feed: RSS · Atom
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h3:*:*:*:*:*:*
part: o version: 11.1.0 update: h3
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Pan Os (8e12cd69-24a5-542d-b766-327e8d373bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9472 |
vulnerable | 2026-06-08 07:00:27.983286 |
PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when Decryption policy is enabled allows an unauthenticated attacker to crash PAN-OS by sending specific traffic through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.
Palo Alto Networks VM-Series, Cloud NGFW, and Prisma Access are not affected.
This issue only affects PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series running these specific versions of PAN-OS:
* 10.2.7-h12
* 10.2.8-h10
* 10.2.9-h9
* 10.2.9-h11
* 10.2.10-h2
* 10.2.10-h3
* 10.2.11
* 10.2.11-h1
* 10.2.11-h2
* 10.2.11-h3
* 11.1.2-h9
* 11.1.2-h12
* 11.1.3-h2
* 11.1.3-h4
* 11.1.3-h6
* 11.2.2
* 11.2.2-h1
Published: 2024-11-14T09:34:22.665Z
Updated: 2024-11-14T14:10:30.404Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5920 |
not_vulnerable | 2026-06-08 06:56:17.912261 |
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3393 |
vulnerable | 2026-06-08 06:41:53.168746 |
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Published: 2024-12-27T09:44:24.538Z
Updated: 2025-10-21T22:55:33.618Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2552 |
vulnerable | 2026-06-08 06:33:31.524957 |
PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.
Published: 2024-11-14T09:39:06.523Z
Updated: 2024-11-14T19:08:21.217Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2550 |
not_vulnerable | 2026-06-08 06:33:31.348513 |
PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Published: 2024-11-14T09:40:38.838Z
Updated: 2024-11-14T14:11:24.889Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0012 |
vulnerable | 2026-06-08 06:21:57.751000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.