Skip to content
OpenAdvisories
Medium WID-SEC-2025-2237 2 CVEs

Palo Alto Networks PAN-OS: Mehrere Schwachstellen

Published Oct 8, 2025 · Updated Oct 9, 2025 · Revision 2 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks PAN-OS ausnutzen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und potenziell um beliebigen Programmcode auszuführen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 2

  • Medium 5.5
    CVE-2025-4615 Public exploit

    PAN-OS: Improper Neutralization of Input in the Management Web Interface

    An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issu…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.8
    CVE-2025-4614

    PAN-OS: Session Token Disclosure Vulnerability

    An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-33583, EUVD-2025-33581

  2. #1

    Initiale Fassung

References