10.0.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-08	CVE-2021-3054	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Paloaltonetworks Pan-Os A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permission to upload plugins to execute arbitrary code with root user privileges. network high complexity paloaltonetworks CWE-367	6.6
2021-09-08	CVE-2021-3055	XXE vulnerability in Paloaltonetworks Pan-Os An improper restriction of XML external entity (XXE) reference vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system and send a specifically crafted request to the firewall that causes the service to crash. network low complexity paloaltonetworks CWE-611	6.5
2021-08-11	CVE-2021-3046	Improper Authentication vulnerability in Paloaltonetworks Pan-Os An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. network low complexity paloaltonetworks CWE-287	6.5
2021-08-11	CVE-2021-3047	Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Paloaltonetworks Pan-Os A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. network high complexity paloaltonetworks CWE-338	3.1
2021-08-11	CVE-2021-3048	Improper Input Validation vulnerability in Paloaltonetworks Pan-Os Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. network high complexity paloaltonetworks CWE-20	5.9
2021-08-11	CVE-2021-3050	OS Command Injection vulnerability in Paloaltonetworks Pan-Os An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. network low complexity paloaltonetworks CWE-78	8.8