Vulnerabilities > Paloaltonetworks > PAN OS > 8.1.2

DATE CVE VULNERABILITY TITLE RISK
2018-10-12 CVE-2018-10141 Cross-site Scripting vulnerability in Paloaltonetworks Pan-Os
GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.
network
low complexity
paloaltonetworks CWE-79
6.1
2018-10-08 CVE-2018-18065 NULL Pointer Dereference vulnerability in multiple products
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
6.5
2018-08-16 CVE-2018-10140 Improper Input Validation vulnerability in Paloaltonetworks Pan-Os 8.1.0/8.1.1/8.1.2
The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page.
network
low complexity
paloaltonetworks CWE-20
4.3