← Back

Globalprotect

globalprotect

Vendor: Paloaltonetworks • 43 CVEs

CVEs (43)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-1573
1Paloaltonetworks
1Globalprotect
Jun 17, 2026
Apr 9, 2019
N/A· v4
2.5 LOW· v3
1.9 LOW· v2
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to ac...Show more
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.Show less
CVE-2017-15870
1Paloaltonetworks
1Globalprotect
May 13, 2026
Dec 11, 2017
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."
CVE-2012-6606
1Paloaltonetworks
2Globalprotect
Netconnect
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a...Show more
Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensitive information via a crafted certificate.Show less