Palo Alto Networks Security Advisories

Found 3
VersionsAffectedUnaffected
iPAN-SA-2025-0005 GlobalProtect Clientless VPN: Clientless VPN Misconfiguration Allows Cross-Site Attacks
Cloud NGFW
PAN-OS
Prisma Access
None
All
All
All
None
None
2025-02-122025-02-12
10CVE-2021-44228 Impact of Log4j Vulnerabilities CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832
Bridgecrew
Cortex Data Lake
Cortex XDR Agent
Cortex XSOAR
Cortex Xpanse
Enterprise Data Loss Prevention
Exact Data Matching CLI
Expedition
GlobalProtect App
IoT Security
Okyo Garde
PAN-DB Private Cloud
PAN-OS
PAN-OS 10.1
PAN-OS 10.0
PAN-OS 9.1
PAN-OS 9.0
PAN-OS 8.1
Prisma Cloud
Prisma Access
Prisma Cloud Compute
Prisma SD-WAN (CloudGenix)
SaaS Security
Traps
User-ID Agent
WildFire Appliance (WF-500)
WildFire Cloud
None
None
None
None
None
None
< 2.1
None
None
None
None
None
None on Firewall, WildFire
None on Panorama
< 10.0.8-h8 on Panorama
< 9.1.12-h3 on Panorama
< 9.0.15 on Panorama
None on Panorama
None
None
None
None
None
None
None
None
None
All
All
All
All
All
All
>= 2.1
All
All
All
All
All
All on Firewall, WildFire
All on Panorama
>= 10.0.8-h8 on Panorama
>= 9.1.12-h3 on Panorama
>= 9.0.15 on Panorama
All on Panorama
All
All
All
All
All
All
All
All
All
2021-12-102022-01-22
3CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions
PAN-OS 10.1
PAN-OS 10.0
PAN-OS 9.1
PAN-OS 9.0
PAN-OS 8.1
All without CTD inspection enabled
All
All
All
All
None with CTD inspection enabled
None
None
None
None
2020-08-122021-07-20
© 2026 Palo Alto Networks, Inc. All rights reserved.