Vulnerabilities > Paloaltonetworks

DATE CVE VULNERABILITY TITLE RISK
2013-08-31 CVE-2012-6602 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6601 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.
network
low complexity
paloaltonetworks CWE-78
critical
 10.0
10
2013-08-31 CVE-2012-6600 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6599 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6598 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6597 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service (management-server crash) by using the command-line interface for a crafted command, aka Ref ID 35254. 		6.3
6.3
2013-08-31 CVE-2012-6596 Credentials Management vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493.
network
low complexity
paloaltonetworks CWE-255
5.0
5.0
2013-08-31 CVE-2012-6595 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6594 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.
network
low complexity
paloaltonetworks CWE-78
critical
 9.0
9.0
2013-08-31 CVE-2012-6593 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
network
low complexity
paloaltonetworks CWE-78
critical
 10.0
10