7.0
High
CVE-2024-9467 A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the…
Description
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Expedition 1.2 | 1.2.0 → < 1.2.96 | 1.2.96 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Expedition
The 12 CVEs of Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
High
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Medium
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Medium
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
High