Palo Alto Networks Expedition
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-0107 | 1 – < 1.2.100 | Expedition: OS Command Injection Vulnerability | HIGH 7.7 | 78 % | ||
| CVE-2025-0106 | 1 – < 1.2.101 | Expedition: Wildcard Expansion Vulnerability | MEDIUM 6.9 | 0.5 % | ||
| CVE-2025-0105 | 1 – < 1.2.101 | Expedition: Arbitrary File Deletion Vulnerability | MEDIUM 6.9 | 13 % | ||
| CVE-2025-0104 | 1 – < 1.2.100 | Expedition: Cross-Site Scripting (XSS) Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2025-0103 | 1 – < 1.2.100 | Expedition: SQL Injection Vulnerability | CRITICAL 9.2 | 0.6 % | ||
| CVE-2024-9467 | 1.2.0 – < 1.2.96 | Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure | HIGH 7.0 | 0.7 % | ||
| CVE-2024-9466 | 1.2.0 – < 1.2.96 | Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure | HIGH 8.2 | 14 % | ||
| CVE-2024-9465 | 1.2.0 – < 1.2.96 | Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure | CRITICAL 9.2 | 100 % | KEV | |
| CVE-2024-9464 | 1.2.0 – < 1.2.96 | Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure | CRITICAL 9.3 | 83 % | ||
| CVE-2024-9463 | 1.2.0 – < 1.2.96 | Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure | CRITICAL 9.9 | 99 % | KEV | |
| CVE-2024-5910 | 1.2 – < 1.2.92 | Expedition: Missing Authentication Leads to Admin Account Takeover | CRITICAL 9.3 | 92 % | KEV | |
| CVE-2020-1977 | 1.1 – 1.1.51 | Expedition Migration Tool: Insufficient Cross Site Request Forgery protection. | HIGH 8.8 | 0.5 % |