259 matches found
CVE-2019-1571: Improper Neutralization of Input During Web Page Generation
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings...
CVE-2019-1569: Improper Neutralization of Input During Web Page Generation
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user...
CVE-2019-1570: Improper Neutralization of Input During Web Page Generation
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings...
Cross-Site Scripting in Expedition Migration Tool
Three cross-site scripting XSS vulnerabilities exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-926/ CVE-2019-1569; MT-927/ CVE-2019-1570; MT-928, MT-929/ CVE-2019-1571 CVE-2019-1569: Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary...
Cross-Site Scripting in Expedition Migration Tool
Three cross-site scripting XSS vulnerabilities exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-926/ CVE-2019-1569; MT-927/ CVE-2019-1570; MT-928, MT-929/ CVE-2019-1571...
PT-2019-1689
Name of the Vulnerable Software and Affected Versions Expedition Migration tool versions 1.1.8 and earlier Description The issue arises from inadequate protection of the web page structure, allowing a remote attacker to exploit the vulnerability and execute arbitrary JavaScript or HTML code. This...
PT-2019-1690
Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings. This is due to a lack of protection for the web page structure...
PT-2019-1691
Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings due to insufficient protection of the web page structure. This ca...
PT-2019-1522
Name of the Vulnerable Software and Affected Versions Expedition Migration tool version 1.1.6 and earlier Palo Alto Networks Migration Tool affected versions not specified Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML, potentially enabling cross-site...
Stored Cross-Site Scripting in Expedition Migration Tool
A stored cross-site scripting XSS vulnerability exists in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-908/ CVE-2019-1567 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the User Mapping Settings. This issue affects...
Stored Cross-Site Scripting in Expedition Migration Tool
A stored cross-site scripting XSS vulnerability exists in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-908/ CVE-2019-1567 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the User Mapping Settings. This issue affects...
Palo Alto Networks Expedition Authentication Bypass
The vulnerability of the Expedition Migration Tool’s migration tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...
CVE-2018-10143
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
CVE-2018-10143
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
Design/Logic Flaw
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
CVE-2018-10143
The CVE-2018-10143 entry concerns the Palo Alto Networks Expedition Migration Tool, affected in version 1.0.107 and earlier. The connected sources confirm an unauthenticated attacker with remote access can execute system-level commands on the device hosting Expedition, indicating a remote code ex...
CVE-2018-10143
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
CVE-2018-10143: Improper Privilege Management
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
Remote Code Execution in Expedition Migration Tool
A remote code execution vulnerability exists in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-794/ CVE-2018-10143 Successful exploitation of this issue may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...
Remote Code Execution in Expedition Migration Tool
A remote code execution vulnerability exists in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-794/ CVE-2018-10143 Successful exploitation of this issue may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application...