Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

paloaltonetworks pan-os 11.1.0 vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv3

CVE-2024-5917

A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the malicious user to view internal network resources not otherwise accessible.
Paloaltonetworks Cloud NgfwPaloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.0.0Paloaltonetworks Pan-osPalo Alto Networks Cloud NgfwPalo Alto Networks Pan-os
10
CVSSv3

CVE-2024-3400

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated malicious user to execute arbitrary code with...
Paloaltonetworks Pan-os 10.2.0Paloaltonetworks Pan-os 11.0.0Paloaltonetworks Pan-os 11.1.0Palo Alto Networks Pan-osPalo Alto Networks Cloud NgfwPalo Alto Networks Prisma AccessPaloaltonetworks Pan-os 10.2.1Paloaltonetworks Pan-os 10.2.2Paloaltonetworks Pan-os 10.2.3Paloaltonetworks Pan-os 10.2.4Paloaltonetworks Pan-os 10.2.5Paloaltonetworks Pan-os 10.2.6
8.2
CVSSv4

CVE-2025-0130

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated malicious user to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successf...
Paloaltonetworks Pan-os 11.2.4Paloaltonetworks Pan-os 11.2.3Paloaltonetworks Pan-os 11.2.2Paloaltonetworks Pan-os 11.2.1Paloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.1.6Paloaltonetworks Pan-os 11.1.5Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0
7.5
CVSSv3

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated malicious user to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition wi...
Paloaltonetworks Pan-os 11.2.2Paloaltonetworks Pan-os 11.2.1Paloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.2Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.1Paloaltonetworks Pan-os 10.2.10Paloaltonetworks Pan-os 10.2.9
8.2
CVSSv4

CVE-2024-9468

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated malicious user to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will resu...
Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.0.5Paloaltonetworks Pan-os 11.0.4Paloaltonetworks Pan-os 11.0.3Paloaltonetworks Pan-os 11.0.2Paloaltonetworks Pan-os 11.0.1Paloaltonetworks Pan-os 11.0.0Paloaltonetworks Pan-os 10.2.10Paloaltonetworks Pan-os 10.2.9Paloaltonetworks Pan-os 10.2.8
7.5
CVSSv3

CVE-2024-2550

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated malicious user to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) cond...
Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.1Paloaltonetworks Pan-os 11.0.5Paloaltonetworks Pan-os 11.0.4Paloaltonetworks Pan-os 11.0.3Paloaltonetworks Pan-os 11.0.2Paloaltonetworks Pan-os 11.0.1Paloaltonetworks Pan-os 11.0.0
5.3
CVSSv4

CVE-2025-0136

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This iss...
Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.0.6Paloaltonetworks Pan-os 11.0.5Paloaltonetworks Pan-os 11.0.4Paloaltonetworks Pan-os 11.0.3Paloaltonetworks Pan-os 11.0.2Paloaltonetworks Pan-os 11.0.1Paloaltonetworks Pan-os 11.0.0
5.1
CVSSv4

CVE-2025-0124

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration...
Paloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.0.5Paloaltonetworks Pan-os 11.0.4Paloaltonetworks Pan-os 11.0.3Paloaltonetworks Pan-os 11.0.2Paloaltonetworks Pan-os 11.0.1Paloaltonetworks Pan-os 11.0.0
6.5
CVSSv3

CVE-2025-0111

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly redu...
Paloaltonetworks Pan-os 11.2.4Paloaltonetworks Pan-os 11.2.3Paloaltonetworks Pan-os 11.2.2Paloaltonetworks Pan-os 11.2.1Paloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.1.6Paloaltonetworks Pan-os 11.1.5Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0
6.9
CVSSv4

CVE-2025-0125

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have ne...
Paloaltonetworks Pan-os 11.2.4Paloaltonetworks Pan-os 11.2.3Paloaltonetworks Pan-os 11.2.2Paloaltonetworks Pan-os 11.2.1Paloaltonetworks Pan-os 11.2.0Paloaltonetworks Pan-os 11.1.4Paloaltonetworks Pan-os 11.1.3Paloaltonetworks Pan-os 11.1.2Paloaltonetworks Pan-os 11.1.1Paloaltonetworks Pan-os 11.1.0Paloaltonetworks Pan-os 11.0.5Paloaltonetworks Pan-os 11.0.4
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
local file inclusionhard-codedCVE-2025-37899CVE-2025-46487CVE-2025-46474dnn.platformCVE-2025-47646school managementwordpress social login and registerreflected XSSCVE-2025-48735CVE-2025-4664zentaopms
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook