Vulnerabilities > Paloaltonetworks > PAN OS > 8.1.20

DATE CVE VULNERABILITY TITLE RISK
2022-03-09 CVE-2022-0022 Use of Password Hash With Insufficient Computational Effort vulnerability in Paloaltonetworks Pan-Os
Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on accounts in normal (non-FIPS-CC) operational mode.
local
low complexity
paloaltonetworks CWE-916
4.4
2022-02-10 CVE-2022-0011 Interpretation Conflict vulnerability in Paloaltonetworks Pan-Os
PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category.
network
low complexity
paloaltonetworks CWE-436
6.5
2021-11-10 CVE-2021-3063 Improper Handling of Exceptional Conditions vulnerability in Paloaltonetworks Pan-Os
An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding.
network
low complexity
paloaltonetworks CWE-755
7.5