CVE-2017-7216
- EPSS 0.22%
- Veröffentlicht 02.05.2017 15:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters.
CVE-2017-7644
- EPSS 0.23%
- Veröffentlicht 29.04.2017 00:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 a...
CVE-2017-7945
- EPSS 0.44%
- Veröffentlicht 29.04.2017 00:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which a...
CVE-2017-7409
- EPSS 0.31%
- Veröffentlicht 21.04.2017 02:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, aka PAN-SA-2017-0011 and PAN-70674.
CVE-2017-7217
- EPSS 0.2%
- Veröffentlicht 14.04.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters.
CVE-2017-7218
- EPSS 0.18%
- Veröffentlicht 14.04.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
CVE-2017-5583
- EPSS 0.58%
- Veröffentlicht 15.03.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVE-2017-5584
- EPSS 0.2%
- Veröffentlicht 15.03.2017 14:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via uns...
CVE-2016-9151
- EPSS 0.43%
- Veröffentlicht 19.11.2016 06:59:03
- Zuletzt bearbeitet 12.04.2025 10:46:40
Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.
- EPSS 62.85%
- Veröffentlicht 19.11.2016 06:59:01
- Zuletzt bearbeitet 12.04.2025 10:46:40
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code v...