CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 11–13 of 13 records

CVE Vendor Product Added Due Status
CVE-2017-15944 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained.
 Palo Alto Networks PAN-OS Aug 18, 2022 Sep 8, 2022
CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.
 Palo Alto Networks PAN-OS Mar 25, 2022 Apr 15, 2022 Ransomware
CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.
 Palo Alto Networks PAN-OS Jan 10, 2022 Jul 10, 2022 Ransomware