CVE-2022-0028
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
CVSS
—
No CVSS
EPSS
2.5%
p85
KEV
YES
Aug 22, 2022
Exploit Today
75
0-100
Published: — · Last modified: —
2.4%EPSS · 30 days2.5%
2026-09-162026-10-14
Product
Palo Alto Networks / PAN-OS
Vulnerability
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Added to KEV
Aug 22, 2022
Remediate by
Sep 12, 2022
Known ransomware use
No
Summary description
A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.
Required action
Apply updates per vendor instructions.
Notes
https://security.paloaltonetworks.com/CVE-2022-0028; https://nvd.nist.gov/vuln/detail/CVE-2022-0028
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-03227.2 HIG—
KEV—50Palo Alto Networks PAN-OS Code Injection Vulnerability10hCVE-2025-01089.1 CRI99.9%
KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability21dCVE-2024-94747.2 HIG99.9%
KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability73dCVE-2024-00129.8 CRI100.0%
KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability73dCVE-2019-15798.1 HIG98.8%
KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability14dCVE-2024-3400—100.0%
KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—