Approved changes feed: RSS · Atom
cpe:2.3:o:paloaltonetworks:pan-os:10.1.8:h4:*:*:*:*:*:*
part: o version: 10.1.8 update: h4
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Pan Os (8e12cd69-24a5-542d-b766-327e8d373bac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9471 |
not_vulnerable | 2026-06-08 07:00:27.872959 |
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key to perform actions as a higher privileged PAN-OS administrator. For example, an administrator with "Virtual system administrator (read-only)" access could use an XML API key of a "Virtual system administrator" to perform write operations on the virtual system configuration even though they should be limited to read-only operations.
Published: 2024-10-09T17:06:41.456Z
Updated: 2024-10-18T11:58:13.115Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5920 |
not_vulnerable | 2026-06-08 06:56:18.007588 |
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
Published: 2024-11-14T09:40:14.513Z
Updated: 2025-04-30T18:39:21.484Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5919 |
not_vulnerable | 2026-06-08 06:56:17.871258 |
PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the firewall management interface.
Published: 2024-11-14T09:36:46.390Z
Updated: 2024-11-14T19:41:04.355Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5918 |
not_vulnerable | 2026-06-08 06:56:17.823946 |
PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate."
Published: 2024-11-14T09:38:29.319Z
Updated: 2024-11-14T19:35:53.159Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2551 |
not_vulnerable | 2026-06-08 06:33:31.489220 |
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.
Published: 2024-11-14T09:36:09.876Z
Updated: 2024-11-19T15:01:40.744Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.