Evidence dossier
CVE-2024-0012
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Exploited in the wild (CISA KEV since Nov 18, 2024). palo_alto reports CVSS 4.0 9.3. Severity assessments differ within at least one CVSS version. EPSS estimates 99.7% exploit likelihood as of Aug 26, 2026.
As of Aug 27, 2026
Normalized restatement
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
- State
- PUBLISHED
- Published
- Nov 18, 2024
- Updated
- Aug 4, 2026
- Evidence coverage
- 72%
Evidence chronology
What was known when
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCACVE ProgramOriginal evidence ↗
Record text: CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
- Source dateSource date omittedFirst observed by CASCApalo_altoOriginal evidence ↗
Record text: PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Inspect raw assertion
- Field
container- Value
- PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 99.72% probability · 99.95th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.997170000000; percentile 0.999500000000
Assessments differ
Values are shown separately by source and CVSS version.
CISA KEV · catalog date Nov 18, 2024 · first observed Jul 19, 2026
FIRST EPSS · score date Aug 26, 2026 · 100th percentile · first observed Aug 26, 2026
palo_alto · CVSS 4.0 · first observed Aug 4, 2026 · values shown separately below
Evidence detail
Source limits and decisions
Why each evidence state has this value
Outside this view’s verified evidenceReason detail begins outside this selected snapshot; the state remains source-bound.
Source comparison
Who said what
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Inspect raw assertion
- Field
container- Value
- PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
99.72% probability · 99.95th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.997170000000; percentile 0.999500000000
Applicability
Cited product scope
Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
4 scope groups
Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "unaffected", "version": "All"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "11.2.0", "lessThan": "11.2.4-h1", "versionType": "custom"}, {"status": "affected", "version": "11.1.0", "lessThan": "11.1.5-h1", "versionType": "custom"}, {"status": "affected", "version": "11.0.0", "lessThan": "11.0.6-h1", "versionType": "custom"}, {"status": "affected", "version": "10.2.0", "lessThan": "10.2.12-h2", "versionType": "custom"}, {"status": "unaffected", "version": "10.1.0"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "unaffected", "version": "All"}]product-612afb736440531327cd224402d663e14e2a3f421cc65267d8acade0f3b99df7Linked exactInspect raw assertions
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 51
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
67f527d0-f85b-4b83-aea5-ba636fc89210
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 35
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a6ab7874-fe24-42ac-8e3a-822a70722126
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 70
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c25ad9ea-7ddc-4704-9d7c-a1d6c1f5f696
cpe:2.3:o:paloaltonetworks:pan-os:11.2.1:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 112
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d8afdfcc-f635-4493-8e98-a87aaaabcb27
cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 25
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
aee36b5c-262e-42b0-b3c1-5eaa003e84b7
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 107
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
df83eaa1-49e1-4ad0-a049-f1b3065950bc
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
135588b5-6771-46a3-98b0-39b4873fd6fd
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h13:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0d4b4dce-1593-4f8a-a461-a41290fe0041
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 63
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b5e7efd5-2179-45bf-bf5b-197b66903d9c
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 105
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
502bf06e-5b51-41f7-9a88-26051675fe0c
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 104
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9a3435a9-2100-4eb3-b20c-6a194a742bcd
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 81
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
723956e9-11fd-42a0-8a35-c1fde9e1877c
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
33340036-0e81-41cd-afc4-480f509f8dd2
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c8c4ac1f-4ff0-4500-afbb-f29613358156
cpe:2.3:o:paloaltonetworks:pan-os:11.2.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 115
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
004be44f-2ba5-411d-96ed-3d92c13160ae
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 43
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e5e6a893-2994-40a3-af35-8af068b0de42
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 91
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b1b284fd-575e-46ea-95d8-d9e5fbba8229
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a7fcfb45-1150-4f9c-8e4b-3db2ade89454
cpe:2.3:o:paloaltonetworks:pan-os:11.0.5:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 85
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c6af1333-12cf-4826-8ed3-0791495e61c4
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h13:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 41
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c3d6d552-6f33-496a-a505-5f59df3b487b
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 38
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1311961a-0ef6-488e-b0c2-edbd508587c9
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 54
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
593afe7a-cb37-4156-a2b8-646a317f3176
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 68
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
50ea3eac-91bd-4b30-a885-bed95b48cc3f
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 83
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6c953c2d-771c-40fc-aa09-1dfb0272af47
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 57
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ad8795be-5cc2-443d-99ad-bd6985cadba7
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 72
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5e1d99d8-300c-4985-835c-3eba2bfc098b
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 58
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f3d096d4-e60e-4d4c-9122-c36b775b4a6f
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 53
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b437dcea-aba3-41ca-b320-97ec430f1122
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 94
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f7627b3-a463-4570-ba23-663feb7b4a8b
cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 92
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2dc41d6e-8632-44bb-bc05-7c22a02306a2
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 55
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2b3d7dba-c90c-451d-94c3-8b7066826308
cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 110
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7b2c0e11-a6ce-419d-86a0-3930de25b544
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9d1fac78-7714-48ec-9fdb-1a565814b958
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 76
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b4425f47-446d-49c1-aac9-5f5b7e5422a6
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 73
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8b689fad-0469-4222-a7ef-3268ccda43a7
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 37
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cbe09375-a863-42ff-813f-c20679d7c45c
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 71
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2416c2ef-1085-493d-84d7-18f7577d4a01
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4b86668f-7bc5-4f50-ae80-e99f6de370d7
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
dddeb31f-efdd-4a66-9687-7ffcf8efdaaf
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 44
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d814f3a3-5e9d-426d-a654-1346d9ece9b3
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0e4172bc-ea53-4e01-b14d-ba897eba2eae
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6adf2a5b-dc55-44b1-a033-4a29c32ab5b1
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6fe16ca7-422a-4a53-8ddc-cb3a982c154f
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 42
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cba2b4fa-16c2-41b9-856d-edc0caf7a164
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h16:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a17fe6d6-e0c3-4e82-a721-75c4e8001984
cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 60
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3d33a0fb-7538-42bf-84e8-7ccd7eef9355
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 40
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f70fc9df-10c9-4ae5-b64b-3153e2e4e9e8
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h12:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 78
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
22f4ff25-b12d-4fe2-83fc-b0dee75fee1d
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 102
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
86053616-71fb-4f6e-8b1e-97c2da6c08a8
cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 30
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09f61a78-1b7c-41f1-a0d8-0ab1e7adf68c
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bec5e9d4-1b58-4c89-8b68-47f996c04234
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
50f0801b-fc9f-4018-a837-cab8cb9c9cd4
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 52
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6cf8f985-7e51-49e6-857a-faaf027f5611
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 106
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d953b45f-7f10-4087-ae3a-bd9ab977af8b
cpe:2.3:o:paloaltonetworks:pan-os:11.2.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 111
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cdfd8b17-5871-4897-b9f1-1a01c6d040a9
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 74
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cb3f7d3e-1479-435b-9249-f8f963440d0a
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 67
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
dfaa23e0-232d-42aa-a5a9-87063348d0df
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 36
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
776e06ec-2fda-4664-ab43-9f6be9b897ca
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 62
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8bb72e15-486f-491f-a08d-e1ac2c8ab121
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 99
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f6ced1cc-d63c-4a10-9035-c461ca35e584
cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 28
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
22206c8d-a8e8-4947-a277-f3256fd5d8ed
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 98
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4f36a8ca-4b15-4a88-ba51-2346506de6e5
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 84
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0b4139e6-7623-4227-98af-383ade9d9a0b
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 32
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a8c42d98-cf8f-456b-9d57-80bbdc2c8e74
cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2269819f-11bd-482c-b8d2-96a9c7ad54d4
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 82
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5601b7e0-68c9-4226-aa3d-d20012f6394b
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 56
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
010f170d-438e-4a57-98b9-e7522fd95fc3
cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 61
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fb95d77f-1263-4d47-a0bb-94a6da937115
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 75
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d27a5944-fcd8-44ab-9986-0fca24e81f5b
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c2d2f5c4-7acc-4514-adbd-3948158b93cc
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 95
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
275872c1-1ebb-4447-8c9f-347f757bff42
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 34
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
aa4994cb-6591-4b44-a5d7-3cdf540b97de
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 101
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d828f283-5ce8-49ba-bfef-92471c2adeae
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 108
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
be3f7369-9f35-409a-9f47-45a959592dfa
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h9:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 100
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bc83c63b-54c8-4667-8742-30a5477414b5
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 66
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
10a69dae-5ad5-4e1c-9df0-c7b7bb023b66
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 116
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c01ad190-f3c2-4349-a063-8c5c78b725b9
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 88
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
82fba0c5-1385-42dd-a85d-da1d818d0ef3
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 109
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e9db4da9-2262-4e9e-b3a1-49d261d01295
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 80
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9110dbfb-07d6-4d64-a8aa-c0e7a7037a87
cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5cb7f608-4f03-46ef-a27e-4c8f5363ff5e
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 90
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3d65f1c-b055-408e-b7f2-512f13bedca6
cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 31
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7b7c37b3-eda9-45d9-94a2-e7b24ba6c887
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 49
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
03c5abf2-8c53-4376-8a64-6cb34e18e77c
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 33
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3aad4ba-22dd-43d3-91f1-8a6f5fbbf029
cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0f30a71d-281e-4bf8-803f-05b517399c6a
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 65
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
10587864-8777-40f9-b162-bfbfab8f5e06
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9c664207-fa80-467e-853b-cbf61f01115f
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a79c13fd-c909-4fee-ae24-a085e953d887
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h9:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 48
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4e9eb9c6-78ba-4c66-a4bd-856bf27388ce
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 39
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5d64390f-f870-4dbf-b0fe-bcdfe58c8685
cpe:2.3:o:paloaltonetworks:pan-os:11.0.6:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 87
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2b6c3aff-3649-484c-a2fb-b71ee02ff176
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
156da55e-4152-47bf-a067-136eec9ade22
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 59
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fee28628-e969-44fc-b577-066db98bbda0
cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 93
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
af099226-a77e-4fdc-a044-8ca46d015c2c
cpe:2.3:o:paloaltonetworks:pan-os:11.2.2:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 114
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f3a4e32-1a9a-4dd2-a71c-44d8f20a3c08
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5d7986dc-187d-4798-8b4a-7d23df0ee0c8
cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 27
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1360c403-bcd8-420e-b907-4127e12b3a3a
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f54b40ac-a555-4447-b147-576d17cab12a
cpe:2.3:o:paloaltonetworks:pan-os:11.0.5:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 86
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0e5fd0c6-81db-4ffe-bdfc-a7de0ee068ff
cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 26
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
619ad3da-9384-4cc5-9f3d-66db5a055bcb
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 69
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fd0cc02e-6079-4094-a355-e3300d7d4dd1
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h12:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 96
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f83e2987-f7b0-486c-8dc3-3c4a8b76f295
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 79
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a0ed8e63-b8f0-482a-a8a9-13c21d60eeb9
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h14:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 47
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0f481b0e-2353-4ab0-8a98-b0efbc409868
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 50
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
872bc747-512a-4872-ac86-e7f1dc589f47
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h11:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 46
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ceb258ee-2c6e-4a63-b04c-89c5f76b0878
cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 29
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3af86bd-c317-45c7-96b6-34bd82579fdb
cpe:2.3:o:paloaltonetworks:pan-os:11.2.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 113
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9b346381-c972-46ae-97d5-425fc27658be
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 89
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6fac22eb-fb4c-4e9d-99a1-d4902262ed06
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 45
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8c7e9211-7041-4720-b4b9-3ea95d425263
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 64
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3ef4ae4f-36f3-4923-ae1e-de9e036d4e2f
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h14:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 97
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f6acdff-947e-4175-8a2a-8b43b86aa8b0
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
98f219ad-a22f-47ac-88fe-b3f75ae059ac
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3:h10:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 103
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0d1e3767-9517-4181-8355-dc0fb1139c95
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h10:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 77
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cc74ece3-4f2c-450c-a781-16b1e53af960
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
20673f1e-733d-41c4-a644-c482431c26ec
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 0 source-reported links
Applicability remains source-scoped; safety and exposure remain unassessed.
Assessments
CVSS by origin
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:RedCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:RedCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:RedEvidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.