9.1.6

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-11	CVE-2021-3045	Argument Injection or Modification vulnerability in Paloaltonetworks Pan-Os An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. network low complexity paloaltonetworks CWE-88	4.9
2021-08-11	CVE-2021-3046	Improper Authentication vulnerability in Paloaltonetworks Pan-Os An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. network low complexity paloaltonetworks CWE-287	6.5
2021-08-11	CVE-2021-3047	Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Paloaltonetworks Pan-Os A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. network high complexity paloaltonetworks CWE-338	3.1
2021-08-11	CVE-2021-3048	Improper Input Validation vulnerability in Paloaltonetworks Pan-Os Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. network high complexity paloaltonetworks CWE-20	5.9
2021-08-11	CVE-2021-3050	OS Command Injection vulnerability in Paloaltonetworks Pan-Os An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. network low complexity paloaltonetworks CWE-78	8.8