Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:expedition_migration_tool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductExpedition Migration Tool (d0d8b8ea-d7ce-5b9a-9c92-2288dd126593)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1977 vulnerable 2026-06-08 05:21:03.868766 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
HIGH (7.5)
Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.
Published: 2020-02-12T22:57:08.179Z
Updated: 2024-09-17T01:01:37.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1574 vulnerable 2026-06-08 05:13:26.181309 Details available
Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.
Published: 2019-04-12T16:57:14.000Z
Updated: 2024-08-04T18:20:28.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1567 vulnerable 2026-06-08 05:13:26.169544 Details available
The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings.
Published: 2019-04-09T19:15:43.000Z
Updated: 2024-08-04T18:20:28.252Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.