Filtered by vendor Paloaltonetworks Subscriptions
Filtered by product Cloud Ngfw Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-4615 1 Paloaltonetworks 3 Cloud Ngfw, Pan-os, Prisma Access 2025-10-14 N/A
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
CVE-2024-5917 1 Paloaltonetworks 2 Cloud Ngfw, Pan-os 2025-01-24 4.9 Medium
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.
CVE-2024-8686 1 Paloaltonetworks 3 Cloud Ngfw, Pan-os, Prisma Access 2024-10-03 7.2 High
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.