CVSS	Summary	Versions	Affected	Unaffected	Published	Updated
0	PAN-SA-2020-0010 Informational: Cortex XSOAR: Impact of Linux and Docker vulnerabilities on Cortex XSOAR	Cortex XSOAR all	none	all	2020-10-14	2020-10-14
9.8 N	CVE-2020-2040 PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0	none < 9.1.3 < 9.0.9 < 8.1.15 8.0.*	>= 10.0.0 >= 9.1.3 >= 9.0.9 >= 8.1.15 none	2020-09-09	2020-09-10
8.8	CVE-2020-2036 PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	none none < 9.0.9 < 8.1.16	>= 10.0.0 >= 9.1.0 >= 9.0.9 >= 8.1.16	2020-09-09	2020-09-09
7.5 N	CVE-2020-2041 PAN-OS: Management web interface denial-of-service (DoS)	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0	none none none < 8.1.16 8.0.*	10.0.* 9.1.* 9.0.* >= 8.1.16 none	2020-09-09	2020-09-09
7.2	CVE-2020-2037 PAN-OS: OS command injection vulnerability in the management web interface	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	none < 9.1.3 < 9.0.10 < 8.1.16	>= 10.0.0 >= 9.1.3 >= 9.0.10 >= 8.1.16	2020-09-09	2020-09-09
7.2	CVE-2020-2042 PAN-OS: Buffer overflow in the management web interface	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	< 10.0.1 none none none	>= 10.0.1 9.1.* 9.0.* 8.1.*	2020-09-09	2020-09-09
7.2	CVE-2020-2038 PAN-OS: OS command injection vulnerability in the management web interface	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	< 10.0.1 < 9.1.4 < 9.0.10 none	>= 10.0.1 >= 9.1.4 >= 9.0.10 8.1.*	2020-09-09	2020-09-09
5.3 N	CVE-2020-2039 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	< 10.0.1 < 9.1.4 < 9.0.10 < 8.1.16	>= 10.0.1 >= 9.1.4 >= 9.0.10 >= 8.1.16	2020-09-09	2020-09-09
3.3	CVE-2020-2044 PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0	< 9.1.3 < 9.0.10 < 8.1.16 8.0.*	>= 9.1.3 >= 9.0.10 >= 8.1.16 none	2020-09-09	2020-09-09
3.3	CVE-2020-2043 PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	none < 9.1.4 < 9.0.10 < 8.1.16	>= 10.0.0 >= 9.1.4 >= 9.0.10 >= 8.1.16	2020-09-09	2020-09-09
3	CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions	PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	10.0.* 9.1.* 9.0.* 8.1.*	none none none none	2020-08-12	2020-08-12
0	PAN-SA-2020-0008 Informational: BootHole Vulnerability Impact on Palo Alto Networks PAN-OS Software	PAN-OS	none	all	2020-08-12	2020-08-25
0	PAN-SA-2020-0009 Informational: Mitigating threats for GlobalProtect clients connecting from untrusted networks	GlobalProtect all	none	none	2020-08-06	2020-08-25
8.1	CVE-2020-2034 PAN-OS: OS command injection vulnerability in GlobalProtect portal	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	< 9.1.3 < 9.0.9 < 8.1.15 8.0.* 7.1.*	>= 9.1.3 >= 9.0.9 >= 8.1.15 none none	2020-07-08	2020-07-10
7.2	CVE-2020-2030 PAN-OS: OS command injection vulnerability in the management interface	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	none none < 8.1.15 8.0.* 7.1.*	>= 9.1.0 >= 9.0.0 >= 8.1.15 none none	2020-07-08	2020-07-08
4.9	CVE-2020-2031 PAN-OS: Integer underflow in the management interface	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1	< 9.1.3 none none	>= 9.1.3 9.0.* 8.1.*	2020-07-08	2020-07-08
4.8	CVE-2020-1982 PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	< 9.1.3 < 9.0.9 < 8.1.15 8.0.* none	>= 9.1.3 >= 9.0.9 >= 8.1.15 none 7.1.*	2020-07-08	2020-07-08
0	PAN-SA-2020-0007 Informational: Third-party or open source vulnerabilities that do not impact Palo Alto Networks Products	PAN-OS all	none	all	2020-07-08	2020-07-08
10 N	CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	< 9.1.3 < 9.0.9 < 8.1.15 8.0.* none	>= 9.1.3 >= 9.0.9 >= 8.1.15 none 7.1.*	2020-06-29	2020-06-29
7.2	CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	none < 9.0.7 < 8.1.13 8.0.* 7.1.*	>= 9.1.0 >= 9.0.7 >= 8.1.13 none none	2020-06-10	2020-06-10
7.2	CVE-2020-2027 PAN-OS: Buffer overflow in authd authentication response	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	none < 9.0.7 < 8.1.13 8.0.* 7.1.*	>= 9.1.0 >= 9.0.7 >= 8.1.13 none none	2020-06-10	2020-06-10
7.2	CVE-2020-2029 PAN-OS: OS command injection vulnerability in management interface certificate generator	PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	none none < 8.1.13 8.0.* < 7.1.26	>= 9.1.0 >= 9.0.0 >= 8.1.13 none >= 7.1.26	2020-06-10	2020-06-10
7	CVE-2020-2032 GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade	GlobalProtect App 5.1 GlobalProtect App 5.0	< 5.1.4 on Windows < 5.0.10 on Windows	>= 5.1.4 on Windows >= 5.0.10 on Windows	2020-06-10	2020-09-01
5.3	CVE-2020-2033 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie	GlobalProtect App 5.1 GlobalProtect App 5.0	< 5.1.4 < 5.0.10	>= 5.1.4 >= 5.0.10	2020-06-10	2020-09-01
9	CVE-2020-2018 PAN-OS: Panorama authentication bypass vulnerability	PAN-OS 9.0 PAN-OS 8.1 PAN-OS 8.0 PAN-OS 7.1	< 9.0.6 < 8.1.12 8.0.* < 7.1.26	>= 9.0.6 >= 8.1.12 none >= 7.1.26	2020-05-13	2020-05-14

N = Exploitable over the network with low complexity, unauthenticated attack.