Medium severity · published Mar 26, 2019
CVE-2019-1569
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user
4.8
CVSS
1.1%
EPSS
No
On KEV
Description
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
Expedition · Palo Alto Networks
through 1.1.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-1569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-1569
Third Party Advisory
http://www.securityfocus.com/bid/107564
Third Party Advisory
https://securityadvisories.paloaltonetworks.com/Home/Detail/142
Exploit
https://www.tenable.com/security/research/tra-2019-13
More from Expedition
9.8
CVE-2024-5910
Expedition: Missing Authentication Leads to Admin Account Takeover
9.1
CVE-2024-9465
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
7.5
CVE-2024-9463
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
9.8
CVE-2025-0107
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which…
9.8
CVE-2018-10143
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting…