Vulnerabilities > Paloaltonetworks

DATE CVE VULNERABILITY TITLE RISK
2013-08-31 CVE-2012-6597 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line interface for a crafted command, aka Ref ID 35254.
6.3
2013-08-31 CVE-2012-6596 Credentials Management vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493.
network
low complexity
paloaltonetworks CWE-255
5.0
2013-08-31 CVE-2012-6595 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.
network
low complexity
paloaltonetworks CWE-78
critical
9.0
2013-08-31 CVE-2012-6594 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.
network
low complexity
paloaltonetworks CWE-78
critical
9.0
2013-08-31 CVE-2012-6593 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
network
low complexity
paloaltonetworks CWE-78
critical
10.0
2013-08-31 CVE-2012-6592 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091.
network
low complexity
paloaltonetworks CWE-78
critical
10.0
2013-08-31 CVE-2012-6591 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116.
network
low complexity
paloaltonetworks CWE-78
critical
9.0
2013-08-31 CVE-2012-6590 Information Exposure vulnerability in Paloaltonetworks Pan-Os
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139.
4.3