9.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2020-02-12	CVE-2020-1975	XXE vulnerability in Paloaltonetworks Pan-Os Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. network low complexity paloaltonetworks CWE-611	8.8
2019-12-20	CVE-2019-17440	Unspecified vulnerability in Paloaltonetworks Pan-Os Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. network low complexity paloaltonetworks critical	9.8
2019-12-05	CVE-2019-17437	Improper Authentication vulnerability in Paloaltonetworks Pan-Os An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. local low complexity paloaltonetworks CWE-287	7.8