en
Palo Alto Networks is a multinational cybersecurity company delivering next‑generation firewall, cloud security, and security operations solutions. It develops and supports a broad ecosystem including PAN‑OS, GlobalProtect, Prisma Cloud, Cortex, and Cloud NGFW, with services spanning on‑premises, cloud, and managed offerings. The company emphasizes global reach and a comprehensive product portfolio.
As of 11/09/2026, Palo Alto Networks recorded 34 security vulnerabilities in the last 90 days across 11 products, including 3 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, PAN-OS had the most security vulnerabilities in the Palo Alto Networks ecosystem, with 11 vulnerabilities—approximately 32.35% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2021-3039Prisma Cloud Compute: User role authorization secret for Console leaked through log file exportCVE-2021-3038GlobalProtect App: Windows VPN kernel driver denial of service (DoS)CVE-2021-3034Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logsCVE-2021-3033Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in ConsoleCVE-2020-2049Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2021-3039Prisma Cloud Compute: User role authorization secret for Console leaked through log file export | Exploitation statusNot confirmed | FixYes |
| Affected productPrisma Cloud Compute |
| Published06/10/2021 |
| SeverityLow |
CVE-2021-3038GlobalProtect App: Windows VPN kernel driver denial of service (DoS) | Exploitation statusNot confirmed | FixYes | Affected productGlobalProtect App | Published04/20/2021 | SeverityMedium |
|---|
CVE-2021-3034Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs | Exploitation statusNot confirmed | FixYes | Affected productCortex XSOAR | Published03/10/2021 | SeverityMedium |
|---|
CVE-2021-3033Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console | Exploitation statusNot confirmed | FixYes | Affected productPrisma Cloud Compute | Published02/10/2021 | SeverityCritical |
|---|
CVE-2020-2049Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation | Exploitation statusNot confirmed | FixYes | Affected productCortex XDR Agent | Published12/09/2020 | SeverityHigh |
|---|
CVE-2020-2020Cortex XDR Agent: Exceptional condition denial-of-service (DoS) | Exploitation statusNot confirmed | FixYes | Affected productCortex XDR Agent | Published12/09/2020 | SeverityMedium |
|---|
CVE-2020-2033GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie | Exploitation statusNot confirmed | FixYes | Affected productGlobalProtect App | Published06/10/2020 | SeverityMedium |
|---|
CVE-2020-2032GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade | Exploitation statusNot confirmed | FixYes | Affected productGlobalProtect App | Published06/10/2020 | SeverityHigh |
|---|
CVE-2020-2004GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs | Exploitation statusNot confirmed | FixYes | Affected productGlobalProtect App | Published05/13/2020 | SeverityMedium |
|---|
CVE-2020-1977Expedition Migration Tool: Insufficient Cross Site Request Forgery protection. | Exploitation statusNot confirmed | FixYes | Affected productExpedition | Published02/12/2020 | SeverityHigh |
|---|
260 Results | Page 6 of 6