Palo Alto Networks Prisma Access

Name: Palo Alto Networks Prisma Access
Brand: Palo Alto Networks

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical12high11medium2low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-0257US	critical9.1OT critical	95.0% (100th)	KEV	11.2.7-h13	2026-05-13	3 versions
CVE-2025-0133US	—	46.3% (99th)	Exploit	no fix	2025-05-14	≤ All
CVE-2021-3060US	high8.1	32.5% (98th)	Exploit	no fix	2021-11-10	2 versions
CVE-2021-3059US	high8.1	1.54% (75th)	—	no fix	2021-11-10	2 versions
CVE-2021-3056US	high8.8	1.54% (75th)	—	no fix	2021-11-10	≤ 2.1 Preferred
CVE-2023-6792US	medium6.3	1.15% (67th)	—	no fix	2023-12-13	—
CVE-2023-6795US	medium4.7	1.14% (67th)	—	no fix	2023-12-13	—
CVE-2024-3384US	high7.5	0.89% (59th)	—	no fix	2024-04-10	—
CVE-2021-3061US	high7.2	0.86% (58th)	—	no fix	2021-11-10	2 versions
CVE-2026-0288US	high7.5	0.83% (57th)	—	10.2.10-h39	2026-07-08	2 versions
CVE-2026-0279US	medium6.1	0.75% (55th)	—	12.1.8	2026-07-09	3 versions
CVE-2026-0227US	high7.5	0.74% (54th)	—	11.2.7-h8	2026-01-15	2 versions
CVE-2026-0310US	—	0.67% (52nd)	—	no fix	2026-09-10	≤ vers:unknown/*
CVE-2022-0011US	medium6.5	0.66% (51st)	—	no fix	2022-02-10	2 versions
CVE-2023-6790US	medium6.1	0.66% (51st)	—	no fix	2023-12-13	—
CVE-2026-0287US	high7.5	0.62% (50th)	—	10.2.10-h39	2026-07-09	2 versions
CVE-2025-4619US	—	0.59% (48th)	—	10.2.10-h14	2025-11-13	10.2.0 → 10.2.10-h14
CVE-2024-3383US	critical9.1	0.58% (47th)	—	no fix	2024-04-10	—
CVE-2023-6794US	medium4.7	0.57% (47th)	—	no fix	2023-12-13	—
CVE-2025-0127US	—	0.57% (47th)	—	no fix	2025-04-11	—
CVE-2026-0301US	high7.5	0.56% (46th)	—	10.2.10	2026-08-13	10.2.0 → 10.2.10
CVE-2023-6793US	low2.7	0.56% (46th)	—	no fix	2023-12-13	—
CVE-2024-0010US	medium6.1	0.51% (43rd)	—	no fix	2024-02-14	—
CVE-2025-4229US	—	0.51% (43rd)	—	no fix	2025-06-13	—
CVE-2025-0125US	—	0.42% (36th)	—	no fix	2025-04-11	—
CVE-2023-6789US	medium4.8	0.41% (36th)	—	no fix	2023-12-13	—
CVE-2024-8687US	high7.1	0.41% (35th)	—	10.2.9 on PAN-OS	2024-09-11	10.2.0 → 10.2.9 on PAN-OS
CVE-2025-0126US	—	0.40% (34th)	—	11.2.4-h5	2025-04-11	2 versions
CVE-2026-0262US	high7.5	0.36% (29th)	—	11.2.7-h13	2026-05-13	2 versions
CVE-2025-0124US	low3.8	0.35% (29th)	—	no fix	2025-04-11	—
CVE-2024-3388US	medium5.0OT elevated	0.35% (28th)	—	10.2.4	2024-04-10	2 versions
CVE-2026-0280US	high7.2	0.34% (27th)	—	11.2.7-h18	2026-07-09	2 versions
CVE-2025-0128US	—	0.32% (25th)	—	10.2.4-h36	2025-04-11	2 versions
CVE-2024-5913US	medium6.8	0.23% (14th)	—	no fix	2024-07-10	≤ None
CVE-2026-0228US	—	0.21% (10th)	—	10.2.10-h28	2026-02-11	10.2.0 → 10.2.10-h28
CVE-2024-3387US	medium5.9	0.17% (6th)	—	no fix	2024-04-10	—
CVE-2025-0136US	—OT elevated	0.17% (6th)	—	no fix	2025-05-14	—
CVE-2025-0123US	—OT elevated	0.12% (2nd)	—	no fix	2025-04-11	—
CVE-2025-2182US	—OT elevated	0.12% (2nd)	—	no fix	2025-08-13	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-754Improper Check for Unusual or Exceptional Conditions5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)38 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan