Known vulnerabilities in Expedition

Software: Expedition
Software CPE: cpe:2.3:a:palo_alto_networks:expedition:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Expedition Expedition is affected by 16 known vulnerabilities: 1 critical, 4 high, 5 medium, 6 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102472 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-0107
CWE-78 Medium
No
No
1.2.101 08.01.2025 SB2025010869
#VU102471 - Improper Neutralization of Wildcards or Matching Symbols
CVE-2025-0106
CWE-155 Medium
No
No
1.2.101 08.01.2025 SB2025010869
#VU102470 - External Control of File Name or Path
CVE-2025-0105
CWE-73 Medium
No
No
1.2.101 08.01.2025 SB2025010869
#VU102469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0104
CWE-79 Low
No
No
1.2.101 08.01.2025 SB2025010869
#VU102468 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-0103
CWE-89 Medium
No
No
1.2.101 08.01.2025 SB2025010869
#VU98387 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-9467
CWE-79 Low
No
No
1.2.96 11.10.2024 SB2024101107
#VU98386 - Cleartext Storage of Sensitive Information
CVE-2024-9466
CWE-312 Low
Available
No
1.2.96 11.10.2024 SB2024101107
#VU98385 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-9465
CWE-89 High
Available
Exploited
1.2.96 11.10.2024 SB2024101107
#VU98384 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9464
CWE-78 High
Available
No
1.2.96 11.10.2024 SB2024101107
#VU98383 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9463
CWE-78 Critical
No
Exploited
1.2.96 11.10.2024 SB2024101107
#VU94368 - Missing Authentication for Critical Function
CVE-2024-5910
CWE-306 High
Available
Exploited
1.2.92 16.07.2024 SB2024071629
#VU25495 - Cross-Site Request Forgery (CSRF)
CVE-2020-1977
CWE-352 Low
No
No
1.1.52 20.02.2020 SB2020022019
#VU18243 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1574
CWE-79 Medium
No
No
1.1.13 11.04.2019 SB2019041102
#VU17888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1567
CWE-79 Low
No
No
1.1.7 01.03.2019 SB2019022808
#VU16530 - Command injection
CVE-2018-10143
CWE-77 High
No
No
1.0.108 13.12.2018 SB2018121309
#VU16231 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10142
CWE-200 Low
Available
No
1.0.107 04.12.2018 SB2018120406