How many Palo Alto Networks PAN-OS CVEs are in CISA KEV?

Yes — 15 of Palo Alto Networks PAN-OS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Palo Alto Networks PAN-OS are affected?

1,585 distinct Palo Alto Networks PAN-OS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Palo Alto Networks PAN-OS CVEs?

Palo Alto Networks PAN-OS's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-20 (Improper Input Validation).

How many critical Palo Alto Networks PAN-OS vulnerabilities are there?

Palo Alto Networks PAN-OS has 37 critical and 92 high-severity CVEs.

What is the average severity of Palo Alto Networks PAN-OS CVEs?

The average CVSS base score across Palo Alto Networks PAN-OS's scored CVEs is 6.7.

Palo Alto Networks PAN-OS Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Palo Alto Networks PAN-OS has 268 published CVE records since 2013, of which 15 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 6.7. Affected platforms include devices other than pa-7500, firewall, pa-1410, pa-1420, pa-200, pa-200, pa-220, pa-500, pa-800, pa-2000 series, pa-3000 series, pa-3200 series, pa-5200.

Severity and exploitation

How the CVSS severity of Palo Alto Networks PAN-OS's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical37

High92

Medium121

Low18

In CISA’s Known Exploited Vulnerabilities catalog

15 of Palo Alto Networks PAN-OS's CVEs are confirmed exploited in the wild.

Public exploits

25 of Palo Alto Networks PAN-OS's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Palo Alto Networks PAN-OS version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

7.1.*18 CVEs
8.0.*18 CVEs
11.0.02 CVEs
7.1 !>= 7.1.02 CVEs
8.1 !>= 8.1.132 CVEs
8.1 < 8.1.132 CVEs
9.0 !>= 9.0.02 CVEs
9.1 !>= 9.1.02 CVEs
10.0.*1 CVE
10.1.*1 CVE
10.1.01 CVE
10.2.10-h121 CVE

Frequently asked questions

Common questions about Palo Alto Networks PAN-OS vulnerabilities.

How many CVEs does Palo Alto Networks PAN-OS have?: Palo Alto Networks PAN-OS has 268 published CVE records since 2013.
How many Palo Alto Networks PAN-OS CVEs are in CISA KEV?: Yes — 15 of Palo Alto Networks PAN-OS's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Palo Alto Networks PAN-OS vulnerabilities?: Yes — 25 of Palo Alto Networks PAN-OS's CVEs have a known public exploit.
Which versions of Palo Alto Networks PAN-OS are affected?: 1,585 distinct Palo Alto Networks PAN-OS versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Palo Alto Networks PAN-OS CVEs?: Palo Alto Networks PAN-OS's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-754 (Improper Check for Unusual or Exceptional Conditions), CWE-20 (Improper Input Validation).
How many critical Palo Alto Networks PAN-OS vulnerabilities are there?: Palo Alto Networks PAN-OS has 37 critical and 92 high-severity CVEs.
What is the average severity of Palo Alto Networks PAN-OS CVEs?: The average CVSS base score across Palo Alto Networks PAN-OS's scored CVEs is 6.7.

Palo Alto Networks PAN-OS Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other Palo Alto Networks products

Frequently asked questions

References

Track Palo Alto Networks PAN-OS vulnerabilities

Version ranges

Fixed in