Login Request a demo
EX
Network Security
Expedition
by Palo Alto Networks · last CVE Jan 11, 2025
On CISA KEVExploited in the wild
16
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 5High 3Medium 8Low 0
Severity
All severities16Critical5High3Medium8Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Expedition to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5910
In wildKEV
9.8
92%
Jul 10
Expedition: Missing Authentication Leads to Admin Account Takeover
Affected: 1.2 before 1.2.92
CVE-2024-9465
In wildKEV
9.1
100%
Oct 9
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
Affected: 1.2.0 before 1.2.96
CVE-2024-9463
In wildKEV
7.5
99%
Oct 9
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
Affected: 1.2.0 before 1.2.96
CVE-2025-0107
9.8
78%
Jan 11
Expedition: OS Command Injection Vulnerability
Affected: 1 before 1.2.100
CVE-2018-10143
9.8
25%
Dec 12
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting…
Affected: 1.0.107
CVE-2025-0105
9.1
13%
Jan 11
Expedition: Arbitrary File Deletion Vulnerability
Affected: 1 before 1.2.101
CVE-2025-0103
8.8
1%
Jan 11
Expedition: SQL Injection Vulnerability
Affected: 1 before 1.2.100
CVE-2018-10142
7.5
2%
Nov 27
The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system
Affected: 1.0.106
CVE-2024-9466
6.5
14%
Oct 9
Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
Affected: 1.2.0 before 1.2.96
CVE-2024-9464
6.5
83%
Oct 9
Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
Affected: 1.2.0 before 1.2.96
CVE-2025-0104
6.1
0%
Jan 11
Expedition: Cross-Site Scripting (XSS) Vulnerability
Affected: 1 before 1.2.100
CVE-2024-9467
6.1
1%
Oct 9
Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure
Affected: 1.2.0 before 1.2.96
CVE-2025-0106
5.3
0%
Jan 11
Expedition: Wildcard Expansion Vulnerability
Affected: 1 before 1.2.101
CVE-2019-1571
4.8
1%
Mar 26
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings
Affected: through 1.1.8
CVE-2019-1570
4.8
1%
Mar 26
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings
Affected: through 1.1.8
CVE-2019-1569
4.8
1%
Mar 26
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user
Affected: through 1.1.8
Showing 16