CVE-2012-6591

Summary: CVE-2012-6591 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5. The device-management CLI is vulnerable to command injection. Impact: remotely (via authenticated admin) execute arbitrary commands with potentially complete device compromise. Affected versions: PAN-OS...

CVE-2012-6598

Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...

CVE-2012-6596

PAN-OS < 4.0.9 and

CVE-2012-6599

The CVE-2012-6599 entry concerns Palo Alto Networks PAN-OS command injection in the device-management CLI. Affected products are PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1, where an authenticated user can execute arbitrary shell commands via unspecified vectors. The vulnerability arises in ...

CVE-2012-6599

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476...

CVE-2013-5664

CVE-2013-5664 affects Palo Alto Networks PAN-OS web-based device-management API browser. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied input is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML via crafted data. Affected versions are PA...

CVE-2012-6595

CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...

CVE-2012-6600

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502...

CVE-2012-6593

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088...

CVE-2012-6595

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...

CVE-2013-5663

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...

CVE-2012-6597

Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service management-server crash by using the command-line interface for a crafted command, aka Ref ID 35254...

CVE-2012-6602

CVE-2012-6602 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.x before 4.0.4. The device-management CLI allows remote authenticated users to inject arbitrary shell commands, enabling arbitrary command execution via the CLI. Root cause: command injection in the management interface. Impact a...

CVE-2012-6601

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...

CVE-2012-6591

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116...

CVE-2012-6602

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122...

CVE-2013-5663

The CVE-2013-5663 issue affects Palo Alto Networks PAN-OS App-ID cache. Affected versions are PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2. The flaw allows remote attackers to bypass security policies by sending crafted requests that trigger invalid caching, demonstrated by i...

CVE-2012-6594

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...

CVE-2012-6604

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249...

Cross-site Scripting Vulnerability

A cross-site scripting vulnerability exists in the web-based device management API browser whereby data provided by the user is echoed back to the user without sanitization. Ref 50908 This issue affects the management interface of the device where the API browser is exposed. This issue affects...