Vulnerabilities > Paloaltonetworks > PAN OS > 7.1.16

DATE CVE VULNERABILITY TITLE RISK
2018-07-03 CVE-2018-9242 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os
The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.9 and earlier may allow an attacker to delete files in the system via specific request parameters.
local
low complexity
paloaltonetworks CWE-20
5.5
2018-01-10 CVE-2017-16878 Cross-site Scripting vulnerability in Paloaltonetworks Pan-Os
Cross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN-OS before 8.0.7 allows remote attackers to inject arbitrary web script or HTML by leveraging an unspecified configuration.
network
low complexity
paloaltonetworks CWE-79
6.1