644 lines
32 KiB
JSON
644 lines
32 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-0308",
|
||
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "palo_alto",
|
||
"dateReserved": "2025-11-03T20:45:07.021Z",
|
||
"datePublished": "2026-09-10T05:48:46.726Z",
|
||
"dateUpdated": "2026-11-10T12:40:08.366Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
|
||
"shortName": "palo_alto",
|
||
"dateUpdated": "2026-09-10T05:48:46.726Z"
|
||
},
|
||
"title": "PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface",
|
||
"datePublic": "2026-09-09T16:00:00.000Z",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-79",
|
||
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"impacts": [
|
||
{
|
||
"capecId": "CAPEC-592",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "CAPEC-592 Stored XSS"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Palo Alto Networks",
|
||
"product": "Cloud NGFW",
|
||
"versions": [
|
||
{
|
||
"status": "unaffected",
|
||
"version": "All",
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected"
|
||
},
|
||
{
|
||
"vendor": "Palo Alto Networks",
|
||
"product": "PAN-OS",
|
||
"versions": [
|
||
{
|
||
"status": "unaffected",
|
||
"version": "12.2.0",
|
||
"lessThan": "12.2.3",
|
||
"changes": [
|
||
{
|
||
"at": "12.2.3",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "12.1.0",
|
||
"lessThan": "12.1.10",
|
||
"changes": [
|
||
{
|
||
"at": "12.1.10",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "11.2.0",
|
||
"lessThan": "11.2.13-h2",
|
||
"changes": [
|
||
{
|
||
"at": "11.2.13-h2",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "11.1.0",
|
||
"lessThan": "11.1.16-h2",
|
||
"changes": [
|
||
{
|
||
"at": "11.1.16-h2",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected",
|
||
"cpes": [
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.9:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.8:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.7:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.6:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.5:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.4:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.3:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:12.1.2:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:h1:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.13:-:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.12:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.11:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.10:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.9:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.8:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.7:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.6:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:h1:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.16:-:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.15:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.14:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.13:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.12:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.11:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.10:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
|
||
"cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Palo Alto Networks",
|
||
"product": "Prisma Access",
|
||
"versions": [
|
||
{
|
||
"status": "unaffected",
|
||
"version": "All",
|
||
"lessThan": "12.1.4-h10",
|
||
"changes": [
|
||
{
|
||
"at": "12.1.7-h5",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "affected"
|
||
}
|
||
],
|
||
"cpeApplicability": [
|
||
{
|
||
"operator": "OR",
|
||
"nodes": [
|
||
{
|
||
"operator": "OR",
|
||
"negate": false,
|
||
"cpeMatch": [
|
||
{
|
||
"vulnerable": true,
|
||
"criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
|
||
"versionStartIncluding": "12.1.0",
|
||
"versionEndExcluding": "12.1.10"
|
||
},
|
||
{
|
||
"vulnerable": true,
|
||
"criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
|
||
"versionStartIncluding": "11.2.13",
|
||
"versionEndExcluding": "11.2.13-h2"
|
||
},
|
||
{
|
||
"vulnerable": true,
|
||
"criteria": "cpe:2.3:o:palo_alto_networks:pan-os:*:*:*:*:*:*:*:*",
|
||
"versionStartIncluding": "11.1.16",
|
||
"versionEndExcluding": "11.1.16-h2"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. \n\nThis issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). \n\nCloud NGFW and Prisma® Access are not affected by this vulnerability.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. <br><br>This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). <br><br>Cloud NGFW and Prisma® Access are not affected by this vulnerability."
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://security.paloaltonetworks.com/CVE-2026-0308",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "The risk is highest when you allow access to the management interface from external IP addresses on the internet."
|
||
}
|
||
],
|
||
"cvssV4_0": {
|
||
"attackVector": "NETWORK",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "NONE",
|
||
"privilegesRequired": "HIGH",
|
||
"userInteraction": "PASSIVE",
|
||
"vulnConfidentialityImpact": "LOW",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnIntegrityImpact": "LOW",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "NONE",
|
||
"subAvailabilityImpact": "NONE",
|
||
"exploitMaturity": "UNREPORTED",
|
||
"Safety": "NOT_DEFINED",
|
||
"Automatable": "NO",
|
||
"Recovery": "USER",
|
||
"valueDensity": "DIFFUSE",
|
||
"vulnerabilityResponseEffort": "MODERATE",
|
||
"providerUrgency": "AMBER",
|
||
"version": "4.0",
|
||
"baseSeverity": "LOW",
|
||
"baseScore": 1.1,
|
||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"
|
||
}
|
||
},
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "You can reduce the risk of exploitation by restricting access to a jump box that is the only system allowed to access the management interface."
|
||
}
|
||
],
|
||
"cvssV4_0": {
|
||
"attackVector": "ADJACENT",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "NONE",
|
||
"privilegesRequired": "HIGH",
|
||
"userInteraction": "PASSIVE",
|
||
"vulnConfidentialityImpact": "LOW",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnIntegrityImpact": "LOW",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "NONE",
|
||
"subAvailabilityImpact": "NONE",
|
||
"exploitMaturity": "UNREPORTED",
|
||
"Safety": "NOT_DEFINED",
|
||
"Automatable": "NO",
|
||
"Recovery": "USER",
|
||
"valueDensity": "DIFFUSE",
|
||
"vulnerabilityResponseEffort": "MODERATE",
|
||
"providerUrgency": "AMBER",
|
||
"version": "4.0",
|
||
"baseSeverity": "LOW",
|
||
"baseScore": 0.4,
|
||
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"
|
||
}
|
||
}
|
||
],
|
||
"configurations": [
|
||
{
|
||
"lang": "en",
|
||
"value": "No special configuration is required to be affected by this issue.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<span>No special configuration is required to be affected by this issue.</span>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"workarounds": [
|
||
{
|
||
"lang": "en",
|
||
"value": "No known workarounds exist for this issue.\n\n\n\nCustomers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510040 and 510041 (from Applications and Threats content version 9145-10233 and later). For these Threat IDs to protect against attacks for this vulnerability:\n\n * Route incoming traffic for the MGT port through a DP port https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba , e.g., enabling management profile on a DP interface for management access.\n\n * Replace the Certificate for Inbound Traffic Management https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c .\n * Decrypt inbound traffic to the management interface so the firewall can inspect it https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2 .\n * Enable threat prevention on the inbound traffic to management services.\n\n\n\n\nPlease note that this Threat ID requires SSL Decryption.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "No known workarounds exist for this issue.<br><br><p>Customers with a Threat Prevention subscription are provided with limited coverage against this vulnerability by enabling Threat ID 510040 and 510041 (from Applications and Threats content version 9145-10233 and later). For these Threat IDs to protect against attacks for this vulnerability:</p><ul><li><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id59206398-3dab-4b2f-9b4b-7ea500d036ba\">Route incoming traffic for the MGT port through a DP port</a>, e.g., enabling management profile on a DP interface for management access.<br></li><li><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#id112f7714-8995-4496-bbf9-781e63dec71c\">Replace the Certificate for Inbound Traffic Management</a>.</li><li><a target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices#idbbd82587-17a2-42b4-9245-d3714e1e13a2\">Decrypt inbound traffic to the management interface so the firewall can inspect it</a>.</li><li>Enable threat prevention on the inbound traffic to management services.</li></ul><p>Please note that this Threat ID requires SSL Decryption.</p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"solutions": [
|
||
{
|
||
"lang": "eng",
|
||
"value": "Version\nMinor Version\nSuggested Solution\nCloud NGFW No action needed.PAN-OS 12.2 No action needed.\n PAN-OS 12.1\n\n 12.1.2 through 12.1.9\n Upgrade to 12.1.10 or later.\n \n PAN-OS 11.2\n\n 11.2.0 through 11.2.13\n Upgrade to 11.2.13-h2 or later.\n \n PAN-OS 11.1\n\n 11.1.0 through 11.1.16\n Upgrade to 11.1.16-h2 or later.\n All older\nunsupported\nPAN-OS versions Upgrade to a supported fixed version.Prisma AccessNo action needed.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr><td><span>Cloud NGFW</span></td><td> </td><td> <span>No action needed.</span></td></tr><tr><td><span>PAN-OS 12.2</span></td><td> </td><td> <span>No action needed.</span></td></tr><tr>\n <td>PAN-OS 12.1<br></td>\n <td>12.1.2 through 12.1.9</td>\n <td>Upgrade to 12.1.10 or later.</td>\n </tr><tr>\n <td>PAN-OS 11.2<br></td>\n <td>11.2.0 through 11.2.13</td>\n <td>Upgrade to 11.2.13-h2 or later.</td>\n </tr><tr>\n <td>PAN-OS 11.1<br></td>\n <td>11.1.0 through 11.1.16</td>\n <td>Upgrade to 11.1.16-h2 or later.</td>\n </tr><tr><td>All older<br>unsupported<br>PAN-OS versions</td><td> </td><td>Upgrade to a supported fixed version.</td></tr><tr><td>Prisma Access</td><td></td><td>No action needed.</td></tr></tbody></table>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"exploits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"timeline": [
|
||
{
|
||
"time": "2026-09-09T16:00:00.000Z",
|
||
"lang": "en",
|
||
"value": "Initial Publication"
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Michał Skowron and Tomasz Stachowicz of ING Hubs Poland and James Otten (internal reporter)",
|
||
"type": "finder"
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "EXTERNAL"
|
||
},
|
||
"x_generator": {
|
||
"engine": "Vulnogram 0.1.0-dev"
|
||
},
|
||
"x_affectedList": [
|
||
"PAN-OS 12.1.9",
|
||
"PAN-OS 12.1.8",
|
||
"PAN-OS 12.1.7-h3",
|
||
"PAN-OS 12.1.7-h2",
|
||
"PAN-OS 12.1.7-h1",
|
||
"PAN-OS 12.1.7",
|
||
"PAN-OS 12.1.6",
|
||
"PAN-OS 12.1.5",
|
||
"PAN-OS 12.1.4-h9",
|
||
"PAN-OS 12.1.4-h8",
|
||
"PAN-OS 12.1.4-h7",
|
||
"PAN-OS 12.1.4-h6",
|
||
"PAN-OS 12.1.4-h5",
|
||
"PAN-OS 12.1.4-h3",
|
||
"PAN-OS 12.1.4-h2",
|
||
"PAN-OS 12.1.4",
|
||
"PAN-OS 12.1.3-h3",
|
||
"PAN-OS 12.1.3-h1",
|
||
"PAN-OS 12.1.3",
|
||
"PAN-OS 12.1.2",
|
||
"PAN-OS 11.2.13-h1",
|
||
"PAN-OS 11.2.13",
|
||
"PAN-OS 11.2.12",
|
||
"PAN-OS 11.2.11",
|
||
"PAN-OS 11.2.10-h13",
|
||
"PAN-OS 11.2.10-h12",
|
||
"PAN-OS 11.2.10-h10",
|
||
"PAN-OS 11.2.10-h9",
|
||
"PAN-OS 11.2.10-h8",
|
||
"PAN-OS 11.2.10-h7",
|
||
"PAN-OS 11.2.10-h6",
|
||
"PAN-OS 11.2.10-h5",
|
||
"PAN-OS 11.2.10-h4",
|
||
"PAN-OS 11.2.10-h3",
|
||
"PAN-OS 11.2.10-h2",
|
||
"PAN-OS 11.2.10-h1",
|
||
"PAN-OS 11.2.10",
|
||
"PAN-OS 11.2.9",
|
||
"PAN-OS 11.2.8",
|
||
"PAN-OS 11.2.7-h19",
|
||
"PAN-OS 11.2.7-h18",
|
||
"PAN-OS 11.2.7-h17",
|
||
"PAN-OS 11.2.7-h16",
|
||
"PAN-OS 11.2.7-h15",
|
||
"PAN-OS 11.2.7-h14",
|
||
"PAN-OS 11.2.7-h13",
|
||
"PAN-OS 11.2.7-h12",
|
||
"PAN-OS 11.2.7-h11",
|
||
"PAN-OS 11.2.7-h10",
|
||
"PAN-OS 11.2.7-h8",
|
||
"PAN-OS 11.2.7-h7",
|
||
"PAN-OS 11.2.7-h4",
|
||
"PAN-OS 11.2.7-h3",
|
||
"PAN-OS 11.2.7-h2",
|
||
"PAN-OS 11.2.7-h1",
|
||
"PAN-OS 11.2.7",
|
||
"PAN-OS 11.2.6",
|
||
"PAN-OS 11.2.5",
|
||
"PAN-OS 11.2.4-h20",
|
||
"PAN-OS 11.2.4-h18",
|
||
"PAN-OS 11.2.4-h17",
|
||
"PAN-OS 11.2.4-h15",
|
||
"PAN-OS 11.2.4-h14",
|
||
"PAN-OS 11.2.4-h12",
|
||
"PAN-OS 11.2.4-h11",
|
||
"PAN-OS 11.2.4-h10",
|
||
"PAN-OS 11.2.4-h9",
|
||
"PAN-OS 11.2.4-h8",
|
||
"PAN-OS 11.2.4-h7",
|
||
"PAN-OS 11.2.4-h6",
|
||
"PAN-OS 11.2.4-h5",
|
||
"PAN-OS 11.2.4-h4",
|
||
"PAN-OS 11.2.4-h3",
|
||
"PAN-OS 11.2.4-h2",
|
||
"PAN-OS 11.2.4-h1",
|
||
"PAN-OS 11.2.4",
|
||
"PAN-OS 11.2.3-h5",
|
||
"PAN-OS 11.2.3-h4",
|
||
"PAN-OS 11.2.3-h3",
|
||
"PAN-OS 11.2.3-h2",
|
||
"PAN-OS 11.2.3-h1",
|
||
"PAN-OS 11.2.3",
|
||
"PAN-OS 11.2.2-h2",
|
||
"PAN-OS 11.2.2-h1",
|
||
"PAN-OS 11.2.1-h1",
|
||
"PAN-OS 11.2.1",
|
||
"PAN-OS 11.2.0-h1",
|
||
"PAN-OS 11.2.0",
|
||
"PAN-OS 11.1.16-h1",
|
||
"PAN-OS 11.1.16",
|
||
"PAN-OS 11.1.15",
|
||
"PAN-OS 11.1.14",
|
||
"PAN-OS 11.1.13-h11",
|
||
"PAN-OS 11.1.13-h10",
|
||
"PAN-OS 11.1.13-h9",
|
||
"PAN-OS 11.1.13-h8",
|
||
"PAN-OS 11.1.13-h7",
|
||
"PAN-OS 11.1.13-h6",
|
||
"PAN-OS 11.1.13-h5",
|
||
"PAN-OS 11.1.13-h3",
|
||
"PAN-OS 11.1.13-h2",
|
||
"PAN-OS 11.1.13-h1",
|
||
"PAN-OS 11.1.13",
|
||
"PAN-OS 11.1.12",
|
||
"PAN-OS 11.1.11",
|
||
"PAN-OS 11.1.10-h32",
|
||
"PAN-OS 11.1.10-h30",
|
||
"PAN-OS 11.1.10-h28",
|
||
"PAN-OS 11.1.10-h27",
|
||
"PAN-OS 11.1.10-h26",
|
||
"PAN-OS 11.1.10-h25",
|
||
"PAN-OS 11.1.10-h21",
|
||
"PAN-OS 11.1.10-h12",
|
||
"PAN-OS 11.1.10-h10",
|
||
"PAN-OS 11.1.10-h9",
|
||
"PAN-OS 11.1.10-h7",
|
||
"PAN-OS 11.1.10-h5",
|
||
"PAN-OS 11.1.10-h4",
|
||
"PAN-OS 11.1.10-h1",
|
||
"PAN-OS 11.1.10",
|
||
"PAN-OS 11.1.9",
|
||
"PAN-OS 11.1.8",
|
||
"PAN-OS 11.1.6-h36",
|
||
"PAN-OS 11.1.6-h35",
|
||
"PAN-OS 11.1.6-h34",
|
||
"PAN-OS 11.1.6-h33",
|
||
"PAN-OS 11.1.6-h32",
|
||
"PAN-OS 11.1.6-h29",
|
||
"PAN-OS 11.1.6-h25",
|
||
"PAN-OS 11.1.6-h23",
|
||
"PAN-OS 11.1.6-h22",
|
||
"PAN-OS 11.1.6-h21",
|
||
"PAN-OS 11.1.6-h20",
|
||
"PAN-OS 11.1.6-h19",
|
||
"PAN-OS 11.1.6-h18",
|
||
"PAN-OS 11.1.6-h17",
|
||
"PAN-OS 11.1.6-h14",
|
||
"PAN-OS 11.1.6-h10",
|
||
"PAN-OS 11.1.6-h7",
|
||
"PAN-OS 11.1.6-h6",
|
||
"PAN-OS 11.1.6-h4",
|
||
"PAN-OS 11.1.6-h3",
|
||
"PAN-OS 11.1.6-h2",
|
||
"PAN-OS 11.1.6-h1",
|
||
"PAN-OS 11.1.6",
|
||
"PAN-OS 11.1.5-h1",
|
||
"PAN-OS 11.1.5",
|
||
"PAN-OS 11.1.4-h35",
|
||
"PAN-OS 11.1.4-h34",
|
||
"PAN-OS 11.1.4-h33",
|
||
"PAN-OS 11.1.4-h32",
|
||
"PAN-OS 11.1.4-h27",
|
||
"PAN-OS 11.1.4-h25",
|
||
"PAN-OS 11.1.4-h18",
|
||
"PAN-OS 11.1.4-h17",
|
||
"PAN-OS 11.1.4-h15",
|
||
"PAN-OS 11.1.4-h13",
|
||
"PAN-OS 11.1.4-h12",
|
||
"PAN-OS 11.1.4-h11",
|
||
"PAN-OS 11.1.4-h10",
|
||
"PAN-OS 11.1.4-h9",
|
||
"PAN-OS 11.1.4-h8",
|
||
"PAN-OS 11.1.4-h7",
|
||
"PAN-OS 11.1.4-h6",
|
||
"PAN-OS 11.1.4-h5",
|
||
"PAN-OS 11.1.4-h4",
|
||
"PAN-OS 11.1.4-h3",
|
||
"PAN-OS 11.1.4-h2",
|
||
"PAN-OS 11.1.4-h1",
|
||
"PAN-OS 11.1.4",
|
||
"PAN-OS 11.1.3-h13",
|
||
"PAN-OS 11.1.3-h12",
|
||
"PAN-OS 11.1.3-h11",
|
||
"PAN-OS 11.1.3-h10",
|
||
"PAN-OS 11.1.3-h9",
|
||
"PAN-OS 11.1.3-h8",
|
||
"PAN-OS 11.1.3-h7",
|
||
"PAN-OS 11.1.3-h6",
|
||
"PAN-OS 11.1.3-h5",
|
||
"PAN-OS 11.1.3-h4",
|
||
"PAN-OS 11.1.3-h3",
|
||
"PAN-OS 11.1.3-h2",
|
||
"PAN-OS 11.1.3-h1",
|
||
"PAN-OS 11.1.3",
|
||
"PAN-OS 11.1.2-h18",
|
||
"PAN-OS 11.1.2-h17",
|
||
"PAN-OS 11.1.2-h16",
|
||
"PAN-OS 11.1.2-h15",
|
||
"PAN-OS 11.1.2-h14",
|
||
"PAN-OS 11.1.2-h13",
|
||
"PAN-OS 11.1.2-h12",
|
||
"PAN-OS 11.1.2-h11",
|
||
"PAN-OS 11.1.2-h10",
|
||
"PAN-OS 11.1.2-h9",
|
||
"PAN-OS 11.1.2-h8",
|
||
"PAN-OS 11.1.2-h7",
|
||
"PAN-OS 11.1.2-h6",
|
||
"PAN-OS 11.1.2-h5",
|
||
"PAN-OS 11.1.2-h4",
|
||
"PAN-OS 11.1.2-h3",
|
||
"PAN-OS 11.1.2-h2",
|
||
"PAN-OS 11.1.2-h1",
|
||
"PAN-OS 11.1.2",
|
||
"PAN-OS 11.1.1-h2",
|
||
"PAN-OS 11.1.1-h1",
|
||
"PAN-OS 11.1.1",
|
||
"PAN-OS 11.1.0-h4",
|
||
"PAN-OS 11.1.0-h3",
|
||
"PAN-OS 11.1.0-h2",
|
||
"PAN-OS 11.1.0-h1",
|
||
"PAN-OS 11.1.0"
|
||
]
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-09-10T13:03:47.811775Z",
|
||
"id": "CVE-2026-0308",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "partial"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-09-10T13:04:03.221Z"
|
||
}
|
||
},
|
||
{
|
||
"x_adpType": "supplier",
|
||
"providerMetadata": {
|
||
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
|
||
"shortName": "siemens-SADP",
|
||
"dateUpdated": "2026-11-10T12:40:08.366Z"
|
||
},
|
||
"affected": [
|
||
{
|
||
"vendor": "Siemens",
|
||
"product": "RUGGEDCOM APE1808",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "0",
|
||
"lessThan": "*",
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unknown"
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-104023.html"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
} |