CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-10-09
Palo Alto Networks Expedition SQL Injection and Arbitrary File Creation Vulnerability (CVE-2024-9465) Security Advisory
[Affected Scope] All vulnerable versions of Palo Alto Networks Expedition migration tool
[Impact] Unauthenticated remote attackers can extract database contents (password hashes, API keys) and read/write arbitrary files, leading to full system compromise
[Mitigation] Immediately upgrade Expedition to the latest patched version and restrict network access to trusted administrative hosts