Filtered by vendor Paloaltonetworks Subscriptions
Filtered by product Expedition Migration Tool Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-1977 1 Paloaltonetworks 1 Expedition Migration Tool 2024-09-17 7.5 High
Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.
CVE-2019-1567 1 Paloaltonetworks 1 Expedition Migration Tool 2024-08-04 N/A
The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings.
CVE-2019-1574 1 Paloaltonetworks 1 Expedition Migration Tool 2024-08-04 N/A
Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.