Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0103 State: PUBLISHED Published: 2025-01-11T02:59:51.177Z Last Updated: 2025-01-13T19:52:47.949Z Vendors: Palo Alto Networks Products: Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access Problem Types: CWE-89 Description: An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0001
CVE ID: CVE-2025-0104 State: PUBLISHED Published: 2025-01-11T03:00:40.318Z Last Updated: 2025-01-13T19:51:27.183Z Vendors: Palo Alto Networks Products: Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that allows phishing attacks and could lead to Expedition browser-session theft. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0001
CVE ID: CVE-2025-0105 State: PUBLISHED Published: 2025-01-11T03:01:24.168Z Last Updated: 2025-01-13T19:50:31.391Z Vendors: Palo Alto Networks Products: Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access Problem Types: CWE-73 Description: An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0001
CVE ID: CVE-2025-0106 State: PUBLISHED Published: 2025-01-11T03:02:24.574Z Last Updated: 2025-01-13T19:48:42.286Z Vendors: Palo Alto Networks Products: Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access Problem Types: CWE-155 Description: A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0001
CVE ID: CVE-2025-0107 State: PUBLISHED Published: 2025-01-11T03:02:49.517Z Last Updated: 2025-01-24T04:56:01.054Z Vendors: Palo Alto Networks Products: Cloud NGFW, Expedition, Panorama, PAN-OS, Prisma Access Problem Types: CWE-78 Description: An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0001
CVE ID: CVE-2025-0108 State: PUBLISHED Published: 2025-02-12T20:55:34.610Z Last Updated: 2025-10-21T22:55:29.063Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-306 Description: An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS. You can greatly reduce the risk of this issue by restricting acces
ively impact integrity and confidentiality of PAN-OS. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2025-0108
CVE ID: CVE-2025-0109 State: PUBLISHED Published: 2025-02-12T20:56:00.946Z Last Updated: 2025-02-25T16:19:04.230Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-73 Description: An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our
this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-0109
CVE ID: CVE-2025-0110 State: PUBLISHED Published: 2025-02-12T21:04:42.675Z Last Updated: 2025-02-19T14:02:03.612Z Vendors: Palo Alto Networks Products: PAN-OS OpenConfig Plugin Problem Types: CWE-78 Description: A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands. The commands are run as the “__openconfig” user (which has the Device Administrator role) on the firewall. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted inter
ou can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0110
CVE ID: CVE-2025-0111 State: PUBLISHED Published: 2025-02-12T20:58:43.387Z Last Updated: 2025-10-21T22:55:28.906Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-73 Description: An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetwor
sted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0111
CVE ID: CVE-2025-0112 State: PUBLISHED Published: 2025-02-19T23:44:33.652Z Last Updated: 2025-02-20T17:23:01.176Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-754 Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0112
CVE ID: CVE-2025-0113 State: PUBLISHED Published: 2025-02-12T21:05:08.795Z Last Updated: 2025-04-09T16:16:48.152Z Vendors: Palo Alto Networks Products: Cortex XDR Broker VM Problem Types: CWE-424 Description: A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from the host network used by Broker VM. This may allow access to read files sent for analysis and logs transmitted by the Cortex XDR Agent to the Cortex XDR server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0113
CVE ID: CVE-2025-0114 State: PUBLISHED Published: 2025-03-12T18:20:05.608Z Last Updated: 2025-03-12T18:34:48.122Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-400 Description: A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://se
ly to Cloud NGFWs or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0114
CVE ID: CVE-2025-0115 State: PUBLISHED Published: 2025-03-12T18:30:13.503Z Last Updated: 2025-03-17T15:22:51.814Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-41 Description: A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guid
nagement interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0115
CVE ID: CVE-2025-0116 State: PUBLISHED Published: 2025-03-12T18:34:38.222Z Last Updated: 2025-03-17T23:58:12.045Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-754 Description: A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode. This issue does not apply to Cloud NGFWs or Prisma Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/C
ccess software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0116
CVE ID: CVE-2025-0117 State: PUBLISHED Published: 2025-03-12T18:35:35.409Z Last Updated: 2025-03-13T03:55:23.839Z Vendors: Palo Alto Networks Products: GlobalProtect App, GlobalProtect UWP App Problem Types: CWE-807 Description: A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0117
CVE ID: CVE-2025-0118 State: PUBLISHED Published: 2025-03-12T18:36:44.290Z Last Updated: 2025-03-12T18:52:08.115Z Vendors: Palo Alto Networks Products: GlobalProtect App, GlobalProtect UWP App Problem Types: CWE-618 Description: A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect
ous page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0118
CVE ID: CVE-2025-0119 State: PUBLISHED Published: 2025-04-11T17:37:54.484Z Last Updated: 2025-04-11T19:00:51.084Z Vendors: Palo Alto Networks Products: Cortex XDR Broker VM Problem Types: CWE-78 Description: A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0119
CVE ID: CVE-2025-0120 State: PUBLISHED Published: 2025-04-11T01:44:48.253Z Last Updated: 2025-05-02T19:08:27.987Z Vendors: Palo Alto Networks Products: GlobalProtect App, GlobalProtect UWP App Problem Types: CWE-250 Description: A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloal
erability difficult to exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0120
CVE ID: CVE-2025-0121 State: PUBLISHED Published: 2025-04-11T01:45:54.148Z Last Updated: 2025-04-11T16:02:36.119Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-476 Description: A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0121
CVE ID: CVE-2025-0122 State: PUBLISHED Published: 2025-04-11T01:48:04.772Z Last Updated: 2025-04-11T16:02:27.010Z Vendors: Palo Alto Networks Products: Prisma SD-WAN Problem Types: CWE-770 Description: A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0122
CVE ID: CVE-2025-0123 State: PUBLISHED Published: 2025-04-11T17:43:05.126Z Last Updated: 2025-04-11T18:36:46.622Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-312 Description: A vulnerability in the Palo Alto Networks PAN-OS® software enables unlicensed administrators to view clear-text data captured using the packet capture feature https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/take-packet-captures/take-a-custom-packet-capture in decrypted HTTP/2 data streams traversing network interfaces on the firewall. HTTP/1.1 data streams are not impacted. In normal conditions, decrypted packet captures are available to firewall admin
HTTP/1.1 data streams are not impacted. In normal conditions, decrypted packet captures are available to firewall administrators after they obtain and install a free Decryption Port Mirror license. The license requirement ensures that this feature can only be used after approved personnel purposefully activate the license. For more information, review how to configure decryption port mirroring https://docs.paloaltonetworks.com/network-security/decryption/administration/monitoring-decryption/configure-decryption-port-mirroring . The administrator must obtain network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. Risk of
to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. Risk of this issue can be greatly reduced by restricting access to the management interface to only trusted administrators and from only internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Customer firewall administrators do not have access to the packet capture feature in Cloud NGFW. This feature is available only to authorized Palo Alto Networks personnel permitted to perform troubleshooting. Prisma® Access is not impact
lable only to authorized Palo Alto Networks personnel permitted to perform troubleshooting. Prisma® Access is not impacted by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0123
CVE ID: CVE-2025-0124 State: PUBLISHED Published: 2025-04-11T01:55:33.563Z Last Updated: 2025-04-11T16:02:18.649Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-73 Description: An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the managemen
nt web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue affects Cloud NGFW. However, this issue does not affect Prisma® Access software. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0124
CVE ID: CVE-2025-0125 State: PUBLISHED Published: 2025-04-11T01:56:17.171Z Last Updated: 2025-04-11T16:02:10.176Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-83 Description: An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses a
uce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW and all Prisma® Access instances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0125
CVE ID: CVE-2025-0126 State: PUBLISHED Published: 2025-04-11T01:57:12.662Z Last Updated: 2025-04-11T16:02:02.228Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-384 Description: When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. The SAML login for the PAN-OS® management interface is not affected. Additionally, this issue does not affect Cloud NGFW and all Prisma® Access instances are proactively patched. Add
ected. Additionally, this issue does not affect Cloud NGFW and all Prisma® Access instances are proactively patched. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0126
CVE ID: CVE-2025-0127 State: PUBLISHED Published: 2025-04-11T02:01:35.087Z Last Updated: 2025-04-11T16:01:52.805Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-78 Description: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-20
erability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0127
CVE ID: CVE-2025-0128 State: PUBLISHED Published: 2025-04-11T02:03:22.355Z Last Updated: 2025-04-11T16:01:46.600Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-754 Description: A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW is not affected by this vulnerability. Prisma® Access software is proactively patched and protected from this issue. Additional
affected by this vulnerability. Prisma® Access software is proactively patched and protected from this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-0128
CVE ID: CVE-2025-0129 State: PUBLISHED Published: 2025-04-11T22:25:36.346Z Last Updated: 2025-06-13T20:50:34.590Z Vendors: Palo Alto Networks Products: Prisma Access Browser Problem Types: CWE-754 Description: An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/PAN-SA-2025-0008