Does anyone know what does it mean generally for CVEs that cannot be found on Palo Alto Advisories?
Does it mean Palo Alto is not affected or the advisories has yet to update?
A few examples that cannot be found would be the following :
Hi @ineedhelp ,
The shortest answer is that Palo Alto doesn't have official statement for those vulnerabilities. But this could be either because it doesn't effect any of the PAN products or it haven't published such yet.
In my experiance Palo Alto are relativly quick with publishing Secuity Advisories affecting their products, so I would assume in this case it is because those CVEs are not affecting any of the PAN products.
I have checked couple of the examples you provide and it seems all of them are related to Apache server 2.4.52 and earlier.
Using the following link you can see that PAN-OS (for example) is using Apache server version 2.4.6
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!