EX
Network Security
Expedition
On CISA KEVExploited in the wild
16
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 3Medium 8Low 0
Watch
Add Expedition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5910 In wildKEV | 9.8 | Jul 10 | Expedition: Missing Authentication Leads to Admin Account Takeover Affected: 1.2 before 1.2.92 |
| CVE-2024-9465 In wildKEV | 9.1 | Oct 9 | Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure Affected: 1.2.0 before 1.2.96 |
| CVE-2024-9463 In wildKEV | 7.5 | Oct 9 | Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure Affected: 1.2.0 before 1.2.96 |
| CVE-2025-0107 | 9.8 | Jan 11 | An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which… Affected: before 1.2.101 |
| CVE-2018-10143 | 9.8 | Dec 12 | The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting… Affected: 1.0.107 |
| CVE-2025-0105 | 9.1 | Jan 11 | An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host… Affected: before 1.2.101 |
| CVE-2025-0103 | 8.8 | Jan 11 | An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames,… Affected: before 1.2.101 |
| CVE-2018-10142 | 7.5 | Nov 27 | The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system Affected: 1.0.106 |
| CVE-2024-9466 | 6.5 | Oct 9 | A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys… Affected: 1.2.0 before 1.2.96 |
| CVE-2024-9464 | 6.5 | Oct 9 | An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure… Affected: 1.2.0 before 1.2.96 |
| CVE-2025-0104 | 6.1 | Jan 11 | A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated… Affected: before 1.2.101 |
| CVE-2024-9467 | 6.1 | Oct 9 | A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user… Affected: 1.2.0 before 1.2.96 |
| CVE-2025-0106 | 5.3 | Jan 11 | A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem Affected: before 1.2.101 |
| CVE-2019-1571 | 4.8 | Mar 26 | The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings Affected: through 1.1.8 |
| CVE-2019-1570 | 4.8 | Mar 26 | The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings Affected: through 1.1.8 |
| CVE-2019-1569 | 4.8 | Mar 26 | The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user Affected: through 1.1.8 |
Showing 16