paloaltonetworks globalprotect

Name: paloaltonetworks globalprotect
Brand: paloaltonetworks

productUS

cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical24high14medium4low

updated 2026-10-28

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-3661US	high7.6OT elevated	4.06% (91st)	Exploit	no fix	2024-05-06	—
CVE-2024-2432US	high7.0	0.39% (33rd)	Exploit	6.0.8	2024-03-13	4 versions
CVE-2024-5921US	high8.8	1.46% (73rd)	—	6.3.2	2024-11-27	5 versions
CVE-2021-3057US	high9.3	1.43% (73rd)	—	5.2.8	2021-10-13	9 versions
CVE-2020-2033US	medium5.3	0.87% (59th)	—	5.1.4	2020-06-10	2 versions
CVE-2012-6606US	medium5.8	0.77% (56th)	—	no fix	2013-08-31	≤ 1.1.6
CVE-2022-0018US	medium6.5	0.75% (55th)	—	5.1.10	2022-02-10	2 versions
CVE-2026-0298US	high8.1	0.66% (51st)	—	6.2.8	2026-08-13	6 versions
CVE-2026-0297US	high8.1	0.60% (49th)	—	6.3.3	2026-08-13	7 versions
CVE-2025-0118US	high8.0	0.46% (40th)	—	6.2.5	2025-03-12	4 versions
CVE-2025-4232US	high8.8	0.45% (39th)	—	6.2.8	2025-06-13	2 versions
CVE-2017-15870US	medium6.7	0.43% (38th)	—	no fix	2017-12-11	≤ 4.0.2
CVE-2024-8687US	high7.1	0.41% (35th)	—	5.1.12	2024-09-11	5 versions
CVE-2026-0250US	high8.1	0.39% (33rd)	—	6.3.3	2026-05-13	9 versions
CVE-2020-1988US	medium6.7	0.37% (31st)	—	4.1.13	2020-04-08	2 versions
CVE-2024-5908US	high7.5	0.37% (30th)	—	6.0.8	2024-06-12	4 versions
CVE-2020-2004US	medium5.5	0.31% (24th)	—	5.0.9	2020-05-13	2 versions
CVE-2019-17436US	high7.1	0.31% (24th)	—	no fix	2019-10-16	2 versions
CVE-2020-1987US	low3.3	0.30% (23rd)	—	5.0.9	2020-04-08	2 versions
CVE-2019-17435US	medium5.5	0.29% (22nd)	—	no fix	2019-10-16	2 versions
CVE-2024-9473US	high7.8	0.29% (21st)	—	6.2.5	2024-10-09	3 versions
CVE-2020-1976US	medium5.5	0.28% (20th)	—	no fix	2020-02-12	5.0 → 5.0.5
CVE-2022-0017US	high7.8	0.28% (20th)	—	5.2.5	2022-02-10	2 versions
CVE-2019-1573US	low2.5OT elevated	0.27% (20th)	—	no fix	2019-04-09	2 versions
CVE-2020-1989US	high7.8	0.27% (18th)	—	5.0.8	2020-04-08	2 versions
CVE-2026-0296US	high7.4	0.26% (17th)	—	6.0.15	2026-08-13	7 versions
CVE-2022-0021US	medium5.5	0.22% (13th)	—	5.2.9	2022-02-10	5.2 → 5.2.9
CVE-2020-2032US	high7.0	0.22% (13th)	—	5.0.10	2020-06-10	2 versions
CVE-2021-3038US	medium4.9	0.22% (12th)	—	5.2.4	2021-04-20	2 versions
CVE-2024-5915US	high7.8	0.21% (11th)	—	6.2.4	2024-08-14	5 versions
CVE-2022-0016US	high7.8	0.21% (11th)	—	5.2.9	2022-02-10	5.2 → 5.2.9
CVE-2026-0251US	high7.8	0.18% (8th)	—	6.3.3	2026-05-13	6 versions
CVE-2023-0009US	high7.8	0.18% (8th)	—	5.2.13	2023-06-14	3 versions
CVE-2026-0299US	high7.8	0.17% (6th)	—	6.0.15	2026-08-13	5 versions
CVE-2022-0019US	medium5.5	0.17% (6th)	—	5.3.2	2022-02-10	3 versions
CVE-2025-4227US	low3.5OT elevated	0.16% (6th)	—	6.2.8	2025-06-13	2 versions
CVE-2025-0120US	high7.0	0.16% (5th)	—	6.0.12	2025-04-11	3 versions
CVE-2024-2431US	—	0.15% (4th)	—	6.0.4	2024-03-13	4 versions
CVE-2025-0135US	low3.3	0.14% (3rd)	—	6.3.3	2025-05-14	2 versions
CVE-2026-0249US	medium6.5	0.11% (1st)	—	6.0.13	2026-05-13	7 versions
CVE-2023-0006US	medium6.3	0.11% (1st)	—	6.0.4	2023-04-12	3 versions
CVE-2026-0295US	high7.0	0.11% (1st)	—	6.0.15	2026-08-13	5 versions
CVE-2026-0267US	medium5.5	0.10% (1st)	—	6.3.3	2026-06-10	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management5 CVEs
CWE-532Insertion of Sensitive Information into Log File5 CVEs
CWE-295Improper Certificate Validation4 CVEs
CWE-426Untrusted Search Path3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-250Execution with Unnecessary Privileges2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE43 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan