Security advisories
Report vulnerabilities
Bug Bounty
Get support
Subscribe
RSS feed
Login
Palo Alto Networks Security Advisories
Clear
Options
Published Date
From
To
Affected Version
severity
CRITICAL
HIGH
MEDIUM
LOW
NONE
product
ActiveMQ Content Pack
1
AutoFocus
6
Autonomous Digital Experience Manager
2
Bridgecrew
8
Bridgecrew Checkov
2
Broker VM
1
Checkov by Prisma Cloud
6
Checkov by Prisma Cloud
1
Chronosphere Chronocollector
1
Cloud NGFW
136
Cloud NGFW
1
Compute in Prisma Cloud Enterprise Edition
1
Cortex Cloud
1
Cortex Data Lake
7
Cortex XCORE (SaaS)
1
Cortex XDR
9
Cortex XDR Agent
46
Cortex XDR Broker VM
11
Cortex XDR Microsoft 365 Defender Pack
1
Cortex XSIAM
2
Cortex XSIAM CommvaultSecurityIQ Marketplace
1
Cortex XSIAM Microsoft Teams Marketplace
1
Cortex XSIAM OS Query
1
Cortex XSOAR
26
Cortex XSOAR CommonScripts
1
Cortex XSOAR CommvaultSecurityIQ Marketplace
1
Cortex XSOAR Kafka Integration
1
Cortex XSOAR Microsoft Teams Marketplace
1
Cortex XSOAR OS Query
1
Cortex XSOAR PowerShell Image
1
Cortex Xpanse
8
Demisto
1
Enterprise Data Loss Prevention
7
Exact Data Matching CLI
7
Expanse
6
Expedition
11
Expedition Migration Tool
6
GlobalProtect App
68
GlobalProtect UWP App
11
Idira
1
IoT Security
7
Koi
1
MetaDefender Endpoint Security SDK
2
MineMeld
1
NetConnect
1
Next Generation Trust Security
1
Okyo Garde
7
PAN-DB Private Cloud
1
PAN-OS
368
PAN-OS 10.2
1
PAN-OS 11.1
1
PAN-OS Firewall
1
PAN-OS OpenConfig Plugin
1
Palo Alto Networks App for Splunk
6
Panorama
5
Prisma AIRS AI Gateway
1
Prisma Access
151
Prisma Access Agent
14
Prisma Access Agent (Endpoint DLP)
1
Prisma Browser
27
Prisma Browser
1
Prisma Cloud
13
Prisma Cloud - Application Security Transporter Client
1
Prisma Cloud Compute
16
Prisma Cloud Compute Edition
1
Prisma SD-WAN
2
Prisma SD-WAN Controller
1
Prisma SD-WAN (CloudGenix)
9
Prisma SD-WAN ION
17
Prisma SD-WAN On-Prem Controller
1
SaaS Security
7
Secdo
3
Strata Cloud Manager
1
Terminal Server Agent
4
Traps
3
Traps ESM Console
2
Traps ESM Core
1
Trust Protection Foundation
4
Twistlock Console
1
Update server
1
User-ID Agent
9
User-ID Credential Agent
1
VM-Series Plugin
1
WildFire Appliance (WF-500)
10
WildFire Appliance WF-500 and WF-500-B
1
WildFire Cloud
10
WildFire WF-500 and WF-500-B
1
Zingbox Inspector
11
Clear
Found 5
Newest
Updated
Severe
Earliest published
Earliest updated
Least Severe
Sort ID ↑
Sort ID ↓
CVSS
Summary
Versions
Affected
Unaffected
Published
Updated
6.1
CVE-2025-4231 PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface
Cloud NGFW
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 11.0
PAN-OS 10.2
PAN-OS 10.1
Prisma Access
None
None
None
< 11.0.3
< 10.2.8
All
None
All
All
All
>= 11.0.3
>= 10.2.8
None
All
2025-06-11
2025-06-11
2
CVE-2025-0133 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal
Cloud NGFW
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 10.2
PAN-OS 10.1
Prisma Access
All
< 11.2.4-h9, < 11.2.7
< 11.1.6-h14, < 11.1.10-h1
< 10.2.16-h1
All
All
None (See Mitigations and Workarounds)
>= 11.2.4-h9, >= 11.2.7
>= 11.1.6-h14, >= 11.1.10-h1
>= 10.2.16-h1
None
None (See Mitigations and Workarounds)
2025-05-14
2025-07-09
i
PAN-SA-2025-0005 GlobalProtect Clientless VPN: Clientless VPN Misconfiguration Allows Cross-Site Attacks
Cloud NGFW
PAN-OS
Prisma Access
None
All
All
All
None
None
2025-02-12
2025-02-12
6
CVE-2023-48795 Impact of Terrapin SSH Attack
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
PAN-OS 11.0
PAN-OS 10.2
PAN-OS 10.1
PAN-OS 9.1
PAN-OS 9.0
None
< 11.2.8
< 11.1.8
All
< 10.2.14
All
All
All
All
>= 11.2.8
>= 11.1.8 ¹
None ²
>= 10.2.14 ¹
None
None
None
2024-01-09
2026-03-10
3
CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions
PAN-OS 10.1
PAN-OS 10.0
PAN-OS 9.1
PAN-OS 9.0
PAN-OS 8.1
All without CTD inspection enabled
All
All
All
All
None with CTD inspection enabled
None
None
None
None
2020-08-12
2021-07-20
Download
© 2026 Palo Alto Networks, Inc. All rights reserved.