CVE-2019-1574

CVE-2019-1574 describes a cross-site scripting (XSS) vulnerability in the Palo Alto Networks Expedition Migration Tool (versions up to 1.1.12). An authenticated attacker can craft a link to execute arbitrary JavaScript/HTML in the user’s Devices View due to improper input validation. Affected rel...

Cross-Site Scripting in Expedition Migration Tool

A cross-site scripting XSS vulnerability exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-1009/ CVE-2019-1574 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the Devices View. This issue affects Expedition 1.1....

Cross-Site Scripting in Expedition Migration Tool

A cross-site scripting XSS vulnerability exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-1009/ CVE-2019-1574 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the Devices View. This issue affects Expedition 1.1....

PT-2019-2086

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Expedition Migration tool version 1.1.12 and earlier Description The issue is related to a cross-site scripting XSS vulnerability that may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices...

CVE-2019-1567

The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings...

CVE-2019-1567

The CVE-2019-1567 issue affects Palo Alto Expedition Migration Tool (1.1.x and earlier). Affected component: User Mapping Settings. Root cause: improper validation/exposure allowing an authenticated attacker to inject arbitrary JavaScript or HTML (stored XSS). Impact: attacker can execute script ...

Network Configuration Transfer Tool Arbitrary JavaScript Execution

The vulnerability of the Network Configuration Transfer tool exists because no measures have been taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript or HTML code remotely...

Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability (CNVD-2019-14249)

Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Expedition Migration Tool 1.1.8 and prior versions, which stems from a lack of proper validation of...

Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability (CNVD-2019-14250)

Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Expedition Migration Tool version 1.1.8 and prior versions, which stems from a lack of proper validation o...

Palo Alto Networks Expedition Migration Tool Cross-Site Scripting Vulnerability

Palo Alto Networks Expedition Migration Tool is a security policy configuration migration tool from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks Expedition Migration Tool version 1.1.8 and prior versions, which stems from a lack of proper validation o...

CVE-2019-1569

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user...

CVE-2019-1570

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings...

CVE-2019-1571

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings...

CVE-2019-1569

CVE-2019-1569 affects Palo Alto Networks Expedition Migration Tool up to version 1.1.8. An authenticated attacker can inject arbitrary JavaScript or HTML in the User Mapping Settings due to improper input validation, enabling cross-site scripting. This is corroborated by multiple sources (NVD lis...

CVE-2019-1569: Improper Neutralization of Input During Web Page Generation

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user...

Palo Alto Networks Migration Tool Domain Scenario Attack

The vulnerability of the Palo Alto Networks Migration Tool’s network configuration transfer utility exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform domain-based attacks using a specially created...

PT-2019-1689

Name of the Vulnerable Software and Affected Versions Expedition Migration tool versions 1.1.8 and earlier Description The issue arises from inadequate protection of the web page structure, allowing a remote attacker to exploit the vulnerability and execute arbitrary JavaScript or HTML code. This...

PT-2019-1691

Name of the Vulnerable Software and Affected Versions The Expedition Migration tool versions 1.1.8 and earlier Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings due to insufficient protection of the web page structure. This ca...

PT-2019-1522

Name of the Vulnerable Software and Affected Versions Expedition Migration tool version 1.1.6 and earlier Palo Alto Networks Migration Tool affected versions not specified Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML, potentially enabling cross-site...

Stored Cross-Site Scripting in Expedition Migration Tool

A stored cross-site scripting XSS vulnerability exists in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-908/ CVE-2019-1567 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the User Mapping Settings. This issue affects...