{"affected":[{"defaultStatus":"unaffected","packageName":"php-src","product":"PHP","source":"CNA: php","vendor":"PHP Group","versions":[{"lessThan":"8.2.35","status":"affected","version":"8.2.*","versionType":"semver"},{"lessThan":"8.3.36","status":"affected","version":"8.3.*","versionType":"semver"},{"lessThan":"8.4.27","status":"affected","version":"8.4.*","versionType":"semver"},{"lessThan":"8.5.12","status":"affected","version":"8.5.*","versionType":"semver"}]},{"defaultStatus":"unknown","product":"AX4","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"CADRA","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Capital","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Designcenter","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Designcenter X","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Designcenter X Essentials","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"DFMExpress","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"HyperLynx","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Insights Hub","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Connect Electronics","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Connect MOM","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Execution Core","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Execution Discrete","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Execution Foundation","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Execution Pharma","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Execution Process","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Intelligence","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Intra Plant Logistics","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter Quality","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter RDnL","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Opcenter X","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Pro Essentials","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Pro Student Edition","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Professional","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Professional - XCR","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Standard - XCR","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"PADS Standard & Standard Plus","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Pathway to Learning Engineering","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Polarion","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"QuadView","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM APE1808","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Simcenter Flomaster","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Simcenter Flux","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Simcenter Simlab","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Solid Edge","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Supply Chain Suite","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Teamcenter","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Teamcenter Product Cost Management","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Teamcenter Share","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Teamcenter Visualization","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Tecnomatix Plant Simulation","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"TestWay","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Valor NPI","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xcargo","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xpedition Designer","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xpedition Enterprise","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xpedition Enterprise XCR","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xpedition IC Packaging","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Xpedition Layout Browser","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"unaffected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"AMIS TS","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"blueplanet 360 NX3 M6 WM OD IISX","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"blueplanet 360 NX3 M6 WM OD IISX - S","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Energy Engage V2.0SP9","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Energy Engage V3.1SP1","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Spectrum Power 4","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Spectrum Power 7","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"Spectrum Power TG","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]},{"ecosystem":"php","packageName":"php-src","product":"php-src","source":"GitHub GHSA-w8hw-w9fx-j79w","vendor":"","versions":[{"status":"affected","version":"< 8.2.35","versionType":"GitHub advisory range"}]},{"ecosystem":"php","packageName":"php-src","product":"php-src","source":"GitHub GHSA-w8hw-w9fx-j79w","vendor":"","versions":[{"status":"affected","version":"< 8.3.36","versionType":"GitHub advisory range"}]},{"ecosystem":"php","packageName":"php-src","product":"php-src","source":"GitHub GHSA-w8hw-w9fx-j79w","vendor":"","versions":[{"status":"affected","version":"< 8.4.27","versionType":"GitHub advisory range"}]},{"ecosystem":"php","packageName":"php-src","product":"php-src","source":"GitHub GHSA-w8hw-w9fx-j79w","vendor":"","versions":[{"status":"affected","version":"< 8.5.12","versionType":"GitHub advisory range"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.35","versionStartIncluding":"7.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"8.3.36","versionStartIncluding":"8.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"8.4.27","versionStartIncluding":"8.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"8.5.12","versionStartIncluding":"8.5.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.7","versionStartIncluding":"10.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h36:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h37:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h38:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h39:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h40:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h41:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h23:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h24:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h26:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h9:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.4","versionStartIncluding":"11.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h35:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h36:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h37:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h35:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h36:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h38:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h39:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h30:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h32:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h33:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h35:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.15:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h3:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndExcluding":"11.2.4","versionStartIncluding":"11.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h20:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h18:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h19:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h13:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.12:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.15:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.2.16:-:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndExcluding":"12.1.4","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h10:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h11:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h12:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h5:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h6:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h8:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.8:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.9:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:h2:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndExcluding":"12.2.4","versionStartIncluding":"12.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:12.2.4:-:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:paloaltonetworks:panorama_m-200:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:paloaltonetworks:panorama_m-300:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:paloaltonetworks:panorama_m-500:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:paloaltonetworks:panorama_m-600:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:paloaltonetworks:panorama_m-700:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:paloaltonetworks:panorama_virtual_appliance:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s_firmware:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:siemens:energy_engage:2.0:service_pack9:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:siemens:energy_engage:3.1:service_pack1:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:siemens:spectrum_power_4:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:siemens:spectrum_power_7:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:siemens:spectrum_power_tg:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:siemens:amis_ts:-:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2026-109618","cwes":["CWE-416","CWE-755","CWE-824","CWE-1325","CWE-1419"],"description":"PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).","epss":{"date":"2026-11-04","percentile":0.99999,"score":0.99999},"exploits":[],"kev":{"addedAt":1792972800000,"dueDateAt":1793232000000,"knownRansomwareUse":false,"product":"PHP","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","shortDescription":"PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.","vendor":"PHP Group","vulnerabilityName":"PHP Memory Corruption Vulnerability"},"metrics":[{"score":9.2,"severity":"critical","source":"CNA: php","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":9.2,"severity":"critical","source":"NVD: security@php.net","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":9.8,"severity":"critical","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793814459617,"publishedAt":1792590514845,"references":[{"source":"CNA: php","tags":["vendor-advisory"],"url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"source":"ADP: CISA-ADP","tags":["third-party-advisory"],"url":"https://www.wiz.io/blog/php2shell-php-rce"},{"source":"ADP: CISA-ADP","tags":["third-party-advisory"],"url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/"},{"source":"ADP: CISA-ADP","tags":["third-party-advisory"],"url":"https://php2shell.delftintellab.com/"},{"source":"ADP: CISA-ADP","tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/10/21/6"},{"source":"ADP: CVE","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/10/23/5"},{"source":"ADP: CVE","tags":[],"url":"http://seclists.org/fulldisclosure/2026/Oct/51"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-566512.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-566435.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-166980.html"},{"source":"security@php.net","tags":["Mitigation","Vendor Advisory"],"url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://seclists.org/fulldisclosure/2026/Oct/51"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2026/10/21/6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2026/10/23/5"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"],"url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/html/ssa-166980.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/html/ssa-566435.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"],"url":"https://cert-portal.siemens.com/productcert/html/ssa-566512.html"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"],"url":"https://php2shell.delftintellab.com/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"],"url":"https://www.wiz.io/blog/php2shell-php-rce"},{"source":"GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"}],"remediation":[{"kind":"workaround","source":"CNA: php","text":"Check the GitHub Security Advisory for mitigation strategies."},{"kind":"fix","source":"GitHub GHSA-w8hw-w9fx-j79w","text":"php-src (php): GitHub reports patched versions 8.2.35. Check the advisory for the affected release branch.","url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"kind":"fix","source":"GitHub GHSA-w8hw-w9fx-j79w","text":"php-src (php): GitHub reports patched versions 8.3.36. Check the advisory for the affected release branch.","url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"kind":"fix","source":"GitHub GHSA-w8hw-w9fx-j79w","text":"php-src (php): GitHub reports patched versions 8.4.27. Check the advisory for the affected release branch.","url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"kind":"fix","source":"GitHub GHSA-w8hw-w9fx-j79w","text":"php-src (php): GitHub reports patched versions 8.5.12. Check the advisory for the affected release branch.","url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"}],"revision":"a5be9a47756a0af7ce433ad0af7d027102d739e9022725eaac57a8d0039d7954","sources":[{"modifiedAt":1793814459617,"name":"CNA: php","retrievedAt":1793815758682,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109618"},{"modifiedAt":1793631129430,"name":"NVD","retrievedAt":1793643408827,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109618"},{"modifiedAt":1793743829000,"name":"GitHub Security Advisories","retrievedAt":1793815810081,"url":"https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"},{"modifiedAt":null,"name":"CISA KEV","retrievedAt":1793593224503,"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793815813979,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-109618"}],"ssvc":{"assessedAt":1792540800000,"automatable":"no","exploitation":"active","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"RCE via OOM corruption","updatedAt":1793815813979}