8.1.11

DATE	CVE	VULNERABILITY TITLE	RISK
2020-03-11	CVE-2020-1979	Use of Externally-Controlled Format String vulnerability in Paloaltonetworks Pan-Os A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. local low complexity paloaltonetworks CWE-134	7.8
2020-02-12	CVE-2020-1975	XXE vulnerability in Paloaltonetworks Pan-Os Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. network low complexity paloaltonetworks CWE-611	8.8