PaloAlto Networks PAN-OS

productDE

cpe:/o:paloaltonetworks:pan-os:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical7high27medium0low

updated 2026-10-27

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2024-0012US	critical9.8OT critical	99.8% (100th)	KEV	no fix	2024-11-18	—
CVE-2024-9474US	high7.2OT critical	93.8% (100th)	KEV	no fix	2024-11-18	—
CVE-2026-0300US	critical9.8OT critical	41.7% (99th)	KEV	no fix	2026-05-06	—
CVE-2020-11899US	medium5.4OT critical	18.4% (97th)	KEV	no fix	2020-06-17	—
CVE-2019-6111US	medium5.9	58.2% (99th)	Exploit	no fix	2019-01-31	—
CVE-2020-11896US	critical10.0	36.9% (98th)	Exploit	no fix	2020-06-17	—
CVE-2018-5391US	high7.5	32.4% (98th)	Exploit	no fix	2018-09-06	—
CVE-2019-6110US	medium6.8	24.9% (98th)	Exploit	no fix	2019-01-31	—
CVE-2020-11898US	critical9.1	18.9% (97th)	Exploit	no fix	2020-06-17	—
CVE-2020-10713US	high8.2	1.71% (77th)	Exploit	no fix	2020-07-30	—
CVE-2020-11901US	critical9.0OT elevated	21.1% (98th)	—	no fix	2020-06-17	—
CVE-2020-11900US	high8.2	13.1% (96th)	—	no fix	2020-06-17	—
CVE-2020-11910US	medium5.3	10.8% (96th)	—	no fix	2020-06-17	—
CVE-2020-11902US	high7.3	9.28% (95th)	—	no fix	2020-06-17	—
CVE-2020-11897US	critical10.0	9.14% (95th)	—	no fix	2020-06-17	—
CVE-2020-11912US	medium5.3	4.52% (91st)	—	no fix	2020-06-17	—
CVE-2019-6109US	medium6.8	3.81% (90th)	—	no fix	2019-01-31	—
CVE-2018-20685US	medium5.3OT elevated	3.68% (90th)	—	no fix	2019-01-10	—
CVE-2020-11909US	medium5.3	3.59% (89th)	—	no fix	2020-06-17	—
CVE-2020-11913US	medium5.3	3.34% (89th)	—	no fix	2020-06-17	—
CVE-2020-11904US	high7.3	3.17% (88th)	—	no fix	2020-06-17	—
CVE-2020-11911US	medium5.3OT elevated	3.15% (88th)	—	no fix	2020-06-17	—
CVE-2020-11903US	medium6.5	2.08% (81st)	—	no fix	2020-06-17	—
CVE-2020-11905US	medium6.5	1.99% (80th)	—	no fix	2020-06-17	—
CVE-2020-11907US	medium6.3	1.96% (80th)	—	no fix	2020-06-17	—
CVE-2020-11906US	medium6.3	1.96% (80th)	—	no fix	2020-06-17	—
CVE-2020-11908US	medium4.3	1.90% (80th)	—	no fix	2020-06-17	—
CVE-2020-11914US	medium4.3	1.66% (76th)	—	no fix	2020-06-17	—
CVE-2020-15707US	medium6.4	1.59% (75th)	—	no fix	2020-07-29	—
CVE-2018-12130US	medium5.6	1.55% (75th)	—	no fix	2019-05-30	—
CVE-2018-12126US	medium5.6	1.51% (74th)	—	no fix	2019-05-30	—
CVE-2018-12127US	medium5.6	1.50% (74th)	—	no fix	2019-05-30	—
CVE-2020-15705US	medium6.4	1.39% (72nd)	—	no fix	2020-07-29	—
CVE-2020-15706US	medium6.4	0.98% (62nd)	—	no fix	2020-07-29	—
CVE-2019-11091US	medium5.6	0.61% (49th)	—	no fix	2019-05-30	—
CVE-2015-8325US	high7.8OT elevated	0.60% (49th)	—	no fix	2016-05-01	—
CVE-2020-14309US	medium6.7	0.48% (41st)	—	no fix	2020-07-30	—
CVE-2020-14311US	medium6.0	0.46% (40th)	—	no fix	2020-07-31	—
CVE-2020-14310US	medium6.0	0.46% (40th)	—	no fix	2020-07-31	—
CVE-2020-14308US	medium6.4	0.43% (37th)	—	no fix	2020-07-29	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation17 CVEs
CWE-125Out-of-bounds Read9 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-190Integer Overflow or Wraparound7 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-203Observable Discrepancy4 CVEs
CWE-284Improper Access Control4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan