GCVE - cpe:2.3:o:paloaltonetworks:pan-os:4.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:paloaltonetworks:pan-os:4.1.2:*:*:*:*:*:*:*

part: o version: 4.1.2 update: *

Vendor	Paloaltonetworks (`3967839f-3a57-5145-af08-e62a2a06ae6a`)
Product	Pan Os (`8e12cd69-24a5-542d-b766-327e8d373bac`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5664`	vulnerable	2026-06-08 05:04:53.023237	Details available Cross-site scripting (XSS) vulnerability in the web-based device-management API browser in Palo Alto Networks PAN-OS before 4.1.13 and 5.0.x before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via crafted data, aka Ref ID 50908. Published: 2013-08-31T17:00:00.000Z Updated: 2024-08-06T17:15:21.577Z Open on db.gcve.eu Reference links https://security.paloaltonetworks.com/CVE-2013-5664	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5663`	vulnerable	2026-06-08 05:04:53.015688	Details available The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195. Published: 2013-08-31T17:00:00.000Z Updated: 2024-08-06T17:15:21.507Z Open on db.gcve.eu Reference links http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update/ http://pastie.org/pastes/5568186/text http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx https://security.paloaltonetworks.com/CVE-2013-5663	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6603`	vulnerable	2026-06-08 05:03:01.210932	Details available The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034. Published: 2013-08-31T17:00:00.000Z Updated: 2024-08-06T21:36:01.836Z Open on db.gcve.eu Reference links https://security.paloaltonetworks.com/CVE-2012-6603	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6601`	vulnerable	2026-06-08 05:03:01.208266	Details available The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983. Published: 2013-08-31T17:00:00.000Z Updated: 2024-08-06T21:36:01.343Z Open on db.gcve.eu Reference links https://security.paloaltonetworks.com/CVE-2012-6601	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6596`	vulnerable	2026-06-08 05:03:01.201234	Details available Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493. Published: 2013-08-31T17:00:00.000Z Updated: 2024-08-06T21:36:01.375Z Open on db.gcve.eu Reference links https://security.paloaltonetworks.com/CVE-2012-6596	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.