Palo Alto products: multiple vulnerabilities | 09/10
HKCERT lists security issues in Palo Alto products, with potential impacts including remote code execution, service disruption and cross-site scripting risks.
Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability. GDMME follow-up priority uses official ratings and headline/summary rules. It is not a CVSS score or official vulnerability rating, and does not confirm that your business is affected.
Source severity
中度風險(HKCERT)
Affected scope
The advisory covers products/branches including all versions of Cloud NGFW AWS and Azure; GlobalProtect App 6.0 versions earlier than 6.0.15 on macOS, Linux and Windows; GlobalProtect App 6.2 versions earlier than 6.2.8-h14 on macOS and Windows. This is a partial scope; check the original advisory for the full version matrix and configuration conditions.
Official recommendations
The official source is linked here; its recommendation text has not been extracted.
GDMME recommended actions
GDMME automatic recommendations are not yet available for this entry. Check the official advisory and ask the responsible team to assess your environment.
Educational information only. Confirm affected versions, mitigations and exploitation status with the original vendor advisory. Reports do not imply that GDMME equipment blocks every vulnerability.