What’s Vulnerable › Products
Palo Alto Networks Expedition vulnerabilities
16 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Palo Alto Networks Expedition version is affected
Exploited Palo Alto Networks Expedition vulnerabilities
- CVE-2024-9465 — Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
- CVE-2024-9463 — Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
- CVE-2024-5910 — Expedition: Missing Authentication Leads to Admin Account Takeover
Latest Palo Alto Networks Expedition vulnerabilities
- CVE-2025-0107 — Expedition: OS Command Injection Vulnerability (CVSS 9.8)
- CVE-2025-0106 — Expedition: Wildcard Expansion Vulnerability (CVSS 5.3)
- CVE-2025-0105 — Expedition: Arbitrary File Deletion Vulnerability (CVSS 9.1)
- CVE-2025-0104 — Expedition: Cross-Site Scripting (XSS) Vulnerability (CVSS 6.1)
- CVE-2025-0103 — Expedition: SQL Injection Vulnerability (CVSS 8.8)
- CVE-2024-9467 — Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure (CVSS 6.1)
- CVE-2024-9466 — Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure (CVSS 6.5)
- CVE-2024-9465 — Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure (CVSS 9.1) — exploited
- CVE-2024-9464 — Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure (CVSS 6.5)
- CVE-2024-9463 — Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure (CVSS 7.5) — exploited
- CVE-2024-5910 — Expedition: Missing Authentication Leads to Admin Account Takeover (CVSS 9.8) — exploited
- CVE-2020-1977 — Expedition Migration Tool: Insufficient Cross Site Request Forgery protection. (CVSS 8.8)
- CVE-2019-1571 — (CVSS 4.8)
- CVE-2019-1570 — (CVSS 4.8)
- CVE-2019-1569 — (CVSS 4.8)
- CVE-2018-10143 — (CVSS 9.8)
- CVE-2018-10142 — (CVSS 7.5)