globalprotect · threatengine.sh

Home/Product/paloaltonetworks globalprotect

Product

paloaltonetworks globalprotect

34 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 6.0.0 and < 6.2.8

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprote

>= 6.0.0 and < 6.2.8

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on

>= 6.0.0 and < 6.2.8

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally

>= 6.0.0 and < 6.0.12

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a l

>= 6.0.0 and < 6.0.11

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the

>= 6.1.0 and < 6.1.6

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the Global

>= 5.1 and < 6.2.5

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-adm

>= 5.1.0 and < 5.1.12

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn

>= 5.1.0 and <= 5.1.9

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to e

>= 5.1 and < 5.1.12

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that r

>= 5.1.0 and < 5.1.12

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to e

>= 5.1.0 and < 5.1.12

An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurati

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to exe

>= 5.2.0 and < 5.2.13

A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system

>= 5.2 and < 5.2.9

An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the

>= 5.1 and < 5.1.10

An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the

>= 5.1 and < 5.1.10

An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credential

>= 5.1 and < 5.1.10

An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app

>= 5.2 and < 5.2.9

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Netwo

>= 5.0 and <= 5.0.8

A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle at

>= 5.1.0 and < 5.1.8

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user t

>= 5.0.0 and < 5.0.10

When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the

>= 5.0.0 and < 5.0.10

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute prog

>= 5.0.0 and < 5.0.9

Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected

>= 5.0 and < 5.0.8

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect A

>= 4.1.0 and < 4.1.13

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file

>= 5.0 and < 5.0.9

An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authentic

>= 5.0 and <= 5.0.5

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local

A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and vers

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agen

GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacke

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTE

Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows m

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin