CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Palo Alto Networks Expedition SQL Injection and Arbitrary File Creation Vulnerability (CVE-2024-9465) Security Advisory
[Affected Scope] All vulnerable versions of Palo Alto Networks Expedition migration tool
[Impact] Unauthenticated remote attackers can extract database contents (password hashes, API keys) and read/write arbitrary files, leading to full system compromise
[Mitigation] Immediately upgrade Expedition to the latest patched version and restrict network access to trusted administrative hosts
Palo Alto Networks Expedition OS Command Injection Vulnerability (CVE-2024-9463) Security Advisory
[Affected Scope] Palo Alto Networks Expedition migration tool versions prior to 1.2.96
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands as root, leading to the exposure of PAN-OS firewall usernames, cleartext passwords, device configurations, and API keys
[Mitigation] Immediately upgrade Expedition to version 1.2.96 or later, and rotate all potentially exposed firewall credentials and API keys
Palo Alto Networks Expedition Administrator Account Takeover and Authentication Bypass Vulnerability (CVE-2024-5910) Security Advisory
[Affected Scope] Palo Alto Networks Expedition versions prior to 1.2.92
[Impact] Attackers with network access can bypass authentication to take over the Expedition administrator account, exposing firewall configurations, credentials, and API keys
[Mitigation] Immediately upgrade Expedition to version 1.2.92 or later, and restrict network access to authorized administrator IPs only