Vulnerabilities > Paloaltonetworks > Globalprotect > 5.1.9

DATE CVE VULNERABILITY TITLE RISK
2023-06-14 CVE-2023-0009 Unspecified vulnerability in Paloaltonetworks Globalprotect
A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges.
local
low complexity
paloaltonetworks
7.8
2022-02-10 CVE-2022-0017 Link Following vulnerability in Paloaltonetworks Globalprotect
An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances.
6.9
2022-02-10 CVE-2022-0018 Information Exposure vulnerability in Paloaltonetworks Globalprotect
An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect portal configuration.
network
high complexity
paloaltonetworks CWE-200
2.6
2022-02-10 CVE-2022-0019 Insufficiently Protected Credentials vulnerability in Paloaltonetworks Globalprotect
An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system.
1.9