CVE-2012-6599

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476...

CVE-2012-6600

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502...

CVE-2012-6604

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249...

CVE-2012-6590

The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...

CVE-2012-6592

CVE-2012-6592 affects Palo Alto Networks PAN-OS 3.1.x and 4.x prior to 4.0.5. The vulnerability allows an unauthenticated attacker to inject commands as root on the device via the management interface, enabling arbitrary command execution and potential total compromise. Affected versions are PAN-...

CVE-2012-6594

The CVE-2012-6594 issue affects Palo Alto Networks PAN-OS: PAN-OS versions prior to 3.1.11, 4.0.x prior to 4.0.8, and 4.1.x prior to 4.1.1 are vulnerable. The device-management CLI allows an authenticated, remote administrator to inject arbitrary shell commands via unspecified vectors. This can l...

CVE-2012-6595

CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...

CVE-2012-6596

PAN-OS < 4.0.9 and

CVE-2012-6597

The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...

CVE-2012-6598

Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...

CVE-2012-6599

The CVE-2012-6599 entry concerns Palo Alto Networks PAN-OS command injection in the device-management CLI. Affected products are PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1, where an authenticated user can execute arbitrary shell commands via unspecified vectors. The vulnerability arises in ...

CVE-2012-6600

Consolidated details: CVE-2012-6600 affects Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2. The device-management CLI allows remote authenticated users to execute arbitrary commands via unspecified vectors. Impact is arbitrary command execution potentially leading to device c...

CVE-2012-6601

PAN-OS < 3.1.12, < 4.0.10 (4.0.x) and

CVE-2012-6603

CVE-2012-6603 affects Palo Alto Networks PAN-OS: the web management UI allows an unauthenticated attacker to bypass authentication and obtain administrator privileges. Affected releases are PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4. The vulnerability is described as an aut...

CVE-2013-5664

CVE-2013-5664 affects Palo Alto Networks PAN-OS web-based device-management API browser. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied input is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML via crafted data. Affected versions are PA...

CVE-2012-6605

CVE-2012-6605 affects Palo Alto Networks PAN-OS prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially compromising the device (root). Affected versions require upgrading to PAN-OS 3.1.11...

CVE-2012-6592

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091...

CVE-2012-6593

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088...

CVE-2012-6602

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122...

CVE-2013-5663

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...