7.0
Élevée
CVE-2024-9467 A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the…
Description
A reflected XSS vulnerability in Palo Alto Networks Expedition enables execution of malicious JavaScript in the context of an authenticated Expedition user's browser if that user clicks on a malicious link, allowing phishing attacks that could lead to Expedition browser session theft.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Expedition 1.2 | 1.2.0 → < 1.2.96 | 1.2.96 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Expedition
Les 12 CVE de Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
Élevée
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Moyenne
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Moyenne
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
Élevée