CVSS	Summary	Versions	Affected	Unaffected	Published	Updated
6.1	CVE-2017-15941 Cross Site Scripting Vulnerability in PAN-OS GlobalProtect	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.6-h3 <= 7.1.13 <= 7.0.18 <= 6.1.18	>= 8.0.7 >= 7.1.14 >= 7.0.19 >= 6.1.19	2018-01-02
9.8 N	CVE-2017-15940 Command Injection in PAN-OS	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.6 <= 7.1.13 <= 7.0.18 <= 6.1.18	>= 8.0.6 >= 7.1.14 >= 7.0.19 >= 6.1.19	2017-12-06
9.8 N	CVE-2017-15944 Vulnerability in PAN-OS and Panorama on Management Interface	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	none <= 7.1.13 <= 7.0.18 <= 6.1.18	>= 8.0.6, >= 8.0 >= 7.1.14 >= 7.0.19 >= 6.1.19	2017-12-06
5.3 N	CVE-2017-15943 Server-Side Request Forgery in PAN-OS	PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 7.1.13 <= 7.0.18 <= 6.1.18	>= 7.1.14 >= 7.0.19 >= 6.1.19	2017-12-06
7.5 N	CVE-2017-15942 Denial of Service Against GlobalProtect	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.5 <= 7.1.12 <= 7.0.18 <= 6.1.18	>= 8.0.6 >= 7.1.13 >= 7.0.19 >= 6.1.19	2017-12-06	2020-05-18
9.8 N	CVE-2017-9458 XML External Entity (XXE) in PAN-OS	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.2 <= 7.1.11 <= 7.0.16 <= 6.1.17	>= 8.0.3 >= 7.1.12 >= 7.0.17 >= 6.1.18	2017-08-30
6.1	CVE-2017-12416 Cross-Site Scripting in PAN-OS	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.2 <= 7.1.11 <= 7.0.16 <= 6.1.17	>= 8.0.3 >= 7.1.12 >= 7.0.17 >= 6.1.18	2017-08-30
8.8	CVE-2017-6460 NTP Vulnerability	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.3 <= 7.1.11 <= 7.0.17 6.1.*	>= 8.0.4 >= 7.1.12 >= 7.0.18 none	2017-07-27
9.8 N	CVE-2016-10229 Kernel Vulnerability	PAN-OS 8.0 PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.1	<= 8.0.2 <= 7.1.10 7.0.* <= 6.1.17	>= 8.0.3 >= 7.1.11 none >= 6.1.18	2017-06-19
5.4	CVE-2016-2219 Cross-site scripting vulnerability	PAN-OS 7.0	>= 7.0.1, <= 7.0.7	>= 7.0.8	2016-06-27
5.3 N	PAN-SA-2016-0008 PAN-OS API denial of service	PAN-OS 7.0	>= 7.0.1, <= 7.0.7	>= 7.0.8	2016-06-27
4.6	PAN-SA-2016-0006 HTTP Header Evasion	PAN-OS 7.1 PAN-OS 7.0 PAN-OS 6.0 PAN-OS 5.0	7.1.0 7.0.* 6.0.* 5.0.*	>= 7.1.1 none none none	2016-04-18

N = Exploitable over the network with low complexity, unauthenticated attack.