Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:*:*:*:*:*:*

part: a version: 6.1.0 update: -

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductGlobalprotect App (4b63ceb2-7a45-521c-a052-9a97f5be547c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0118 not_vulnerable 2026-06-08 07:00:29.478940 GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.
Published: 2025-03-12T18:36:44.290Z
Updated: 2025-03-12T18:52:08.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9473 vulnerable 2026-06-08 07:00:28.011022 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.
Published: 2024-10-09T17:07:00.981Z
Updated: 2024-10-18T11:59:17.267Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.