Palo Alto Networks PAN-OS 9.0.17 H1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*

part: o version: 9.0.17 update: h1

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductPan Os (8e12cd69-24a5-542d-b766-327e8d373bac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3388 vulnerable 2026-06-08 06:41:53.131691 PAN-OS: User Impersonation in GlobalProtect SSL VPN
MEDIUM (4.1)
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.
Published: 2024-04-10T17:06:40.685Z
Updated: 2024-08-01T20:12:06.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3386 vulnerable 2026-06-08 06:41:53.119272 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended
MEDIUM (5.3)
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.
Published: 2024-04-10T17:06:32.694Z
Updated: 2026-05-13T20:15:56.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3385 vulnerable 2026-06-08 06:41:53.115997 PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
HIGH (7.5)
A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls
Published: 2024-04-10T17:06:28.153Z
Updated: 2026-05-13T20:17:23.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2433 vulnerable 2026-06-08 06:33:31.109478 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss
MEDIUM (4.3)
An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images. This issue affects only the web interface of the management plane; the dataplane is unaffected.
Published: 2024-03-13T17:51:45.578Z
Updated: 2026-05-13T20:17:13.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0010 vulnerable 2026-06-08 06:21:57.701680 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal
MEDIUM (4.3)
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft.
Published: 2024-02-14T17:32:28.818Z
Updated: 2025-04-24T15:15:56.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0008 vulnerable 2026-06-08 06:21:57.692447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.