Expedition
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:expedition:1.2.80:-:*:*:*:*:*:*
part: a version: 1.2.80 update: -
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Expedition (c618198b-f793-5d63-9206-fb42d889f3b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9467 |
vulnerable | 2026-06-08 07:00:27.679362 |
Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.
Published: 2024-10-09T17:04:56.867Z
Updated: 2024-10-18T11:52:07.963Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9466 |
vulnerable | 2026-06-08 07:00:27.673923 |
Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure
A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.
Published: 2024-10-09T17:04:36.252Z
Updated: 2025-09-04T15:09:40.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9465 |
vulnerable | 2026-06-08 07:00:27.668534 |
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
Published: 2024-10-09T17:04:01.720Z
Updated: 2025-10-21T22:55:42.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9464 |
vulnerable | 2026-06-08 07:00:27.658257 |
Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Published: 2024-10-09T17:03:33.904Z
Updated: 2024-10-18T15:40:20.097Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9463 |
vulnerable | 2026-06-08 07:00:27.642519 |
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Published: 2024-10-09T17:03:12.012Z
Updated: 2025-10-21T22:55:42.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.