Represented by AHEAD ↗, CBTS ↗, Carahsoft ↗, Exclusive Networks ↗, Herjavec Group ↗, NWN Corporation ↗, TD SYNNEX ↗, Trace3 ↗, World Wide Technology ↗, ePlus ↗
No description recorded yet for Palo Alto Networks.
Tools & products
We build profiles from public sources and haven't extracted a capability list for Palo Alto Networks. Closest sources we do hold:
Drawn from this vendor's own public materials and authored to keep category questionnaires balanced. Gaps reflect capabilities not emphasized in public materials, not rankings.
Strengths: Prisma Cloud offers broad multi-pillar CNAPP coverage with a large enterprise footprint and many integrations.
Gaps: Breadth can bring configuration complexity, and module/credit-based licensing can be hard to scope.
Strengths: Cortex XDR correlates endpoint, network, and cloud telemetry with strong analytics and automation.
Gaps: Positioned as an XDR suite; standalone endpoint-only EDR specifics are emphasized less than the broader platform.
Integrates with: Armadin ↗, CyberArk ↗, Google ↗, Resolver ↗, ServiceNow ↗, Threat Intelligence ↗, Threat Landscape ↗
Integrated by: Abstract Security, Acalvio Technologies, Andesite, Anomali, Anvilogic, Axoflow, Blackpoint Cyber, Blink Ops, Brandefense, Bricata, CardinalOps, Censys, Cisco, Claroty, Coalition, Code42, Commvault, Corelight, Cribl, Critical Start, CyCognito, DTS Systeme GmbH, Darktrace, DataBahn, Dataminr, Datashield, Discern Security, DisruptOps, Dropzone AI, ELLIO, ESET, Elastic, Endace, Exaforce, Expel, ExtraHop, Fiarone, FireMon, General Dynamics, Gigamon, Gurucul, Hideez, Hydden, IRONSCALES, Infisical, Intezer, Kentik, Mimecast, Mitigata, Monad, Morphisec, Nagomi Security, Nile Secure, Nozomi Networks, Nutanix, OctoXLabs, OneLayer, Open Systems, Plixer, Portkey, Proofpoint, Protectimus Limited, Qevlar AI, QuilrAI, Reach Security, Realm.Security, Red Canary, SOC Jedi.AI, SOCRadar Cyber Intelligence Inc., Saiflow, Seceon Inc, SecurEnvoy, SecurityScorecard, Semgrep, SentinelOne, Seraphic, Smarttech247, Socura, Spirion, SpyCloud, Synack, Talon Cyber Security, Tamnoon, Team Cymru, Tenable, Tenzir, ThreatDown by Malwarebytes, ThreatSTOP, Torq, UncommonX, Veza, Vorlon, Votiro, Wiz, ZEST Security, Zero Networks, Zynap, eSentire, ilantus, mondoo, netcraft, rebasoft, runZero
3 of 5 independent trust signals established
Palo Alto Networks has 3 dimensions with established evidence. The rest have not been confirmed yet.
Not yet established: Independently verified · Disclosure posture
Has anyone other than the vendor confirmed this?
Nothing here has been confirmed by an independent third party yet.
Is this a real, durable business?
How long this vendor has been operating, and who stands behind them.
What do they do when something goes wrong?
What their public record shows about handling vulnerabilities and outages.
Do they tell you the awkward things unprompted?
How much this vendor volunteers before you have to ask.
Are they still shipping, or coasting?
Whether this vendor is visibly still building.
Security headers (4/5) — checked 10/18/2026
Infrastructure & transparency signals
32 CVEs have an estimated 10%-or-higher chance of having already been exploited despite not appearing on CISA's KEV catalog. KEV is a curated record of confirmed cases rather than a complete census, so this is where its coverage is likely thinnest — an estimate from EPSS history, not a finding. Based on a median of 2 EPSS observations per CVE.
Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.
An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the m…
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improp…
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privile…
An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an inval…
An information exposure through log file vulnerability exists where the password for the configured system proxy server for a PAN-OS appliance may be displayed in cleartext when using the CLI in Palo …
An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed device when the Panora…
An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS soft…
An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail c…
An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service…
An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not pro…
When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on t…
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS …
When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on th…
A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges. This issue can be exploited only while pe…
A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrato…
Improper restriction of XML external entity reference ('XXE') vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network access to the Panoram…
An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for a remote unauthenticated user to send a specifically crafted registration reques…
An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and wri…
An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system …
A cross-site scripting (XSS) vulnerability exists when visiting malicious websites with the Palo Alto Networks GlobalProtect Clientless VPN that can compromise the user's active session. This issue af…
Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on GlobalProtect app (also known as GlobalProtect…
An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS by failing to verify the integrity of the Kerberos key distri…
Not a quality rating or endorsement — a measure of how much verified, disclosed data we actually have about this vendor. A low score usually means "we don't have much verified information yet," not "this is a bad vendor." Never used to sort or rank vendor lists.
The platform admin controls the formula's weights.
Datasheets, whitepapers, and case studies found on paloaltonetworks.com by the enrichment loop. Links open the original documents on the vendor's own site.
Showing 40 of 55 discovered documents.
Product information on this page is auto-generated by 0-Doubt from public sources and not yet confirmed by the vendor or an independent analyst, unless an item is individually labelled otherwise. How trust works →
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via …
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x…
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on th…
