paloaltonetworks expedition vulnerabilities and exploits

(subscribe to this query)

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

Paloaltonetworks Expedition

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated malicious user to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewa...

Paloaltonetworks Expedition

1 Metasploit module1 Github repository4 Articles

A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated malicious user to reveal firewall usernames, passwords, and API keys generated using those credentials.

Paloaltonetworks Expedition

1 Github repository1 Article

A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser sess...

Paloaltonetworks Expedition

1 Article

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration se...

Paloaltonetworks Expedition

1 Metasploit module1 Github repository6 Articles

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the LDAP server settings.

Paloaltonetworks Expedition

The Expedition Migration tool 1.1.8 and previous versions may allow an authenticated malicious user to run arbitrary JavaScript or HTML in the RADIUS server settings.

Paloaltonetworks Expedition

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated malicious user to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS fire...

Paloaltonetworks Expedition

3 Articles

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated malicious user to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary...

Paloaltonetworks Expedition

3 Github repositories3 Articles

The Expedition Migration tool 1.0.106 and previous versions may allow an unauthenticated malicious user to enumerate files on the operating system.

Paloaltonetworks Expedition 1.0.106

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook