Palo Alto Networks PAN-OS 10.1.9 H1
Approved changes feed: RSS · Atom
cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h1:*:*:*:*:*:*
part: o version: 10.1.9 update: h1
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Pan Os (8e12cd69-24a5-542d-b766-327e8d373bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9471 |
not_vulnerable | 2026-06-08 07:00:27.869406 |
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key to perform actions as a higher privileged PAN-OS administrator. For example, an administrator with "Virtual system administrator (read-only)" access could use an XML API key of a "Virtual system administrator" to perform write operations on the virtual system configuration even though they should be limited to read-only operations.
Published: 2024-10-09T17:06:41.456Z
Updated: 2024-10-18T11:58:13.115Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5920 |
not_vulnerable | 2026-06-08 06:56:18.007251 |
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5919 |
not_vulnerable | 2026-06-08 06:56:17.871139 |
PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.
Published: 2024-11-14T09:36:46.390Z
Updated: 2024-11-14T19:41:04.355Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5918 |
not_vulnerable | 2026-06-08 06:56:17.820127 |
PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate."
Published: 2024-11-14T09:38:29.319Z
Updated: 2024-11-14T19:35:53.159Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3386 |
vulnerable | 2026-06-08 06:41:53.121567 |
PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended
MEDIUM (5.3)
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.
Published: 2024-04-10T17:06:32.694Z
Updated: 2026-05-13T20:15:56.923Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2551 |
not_vulnerable | 2026-06-08 06:33:31.485697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.