Page 2 of 16 results (0.004 seconds)

CVSS: 10.0EPSS: 90%CPEs: 1EXPL: 3

CVE-2024-5910 – Palo Alto Networks Expedition Missing Authentication Vulnerability

https://notcve.org/view.php?id=CVE-2024-5910

10 Jul 2024 — Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue. La falta de autenticación para una función crítica en Palo Alto Networks Expedition puede provocar que los atacantes con acceso a la red de Ex... • https://packetstorm.news/files/id/182665 • CWE-306: Missing Authentication for Critical Function •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-1571

https://notcve.org/view.php?id=CVE-2019-1571

26 Mar 2019 — The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings. La herramienta Expedition Migration, en versiones 1.1.8 y anteriores, podría permitir que un atacante autenticado ejecute JavaScript o HTML arbitrarios en las opciones del servidor RADIUS. • http://www.securityfocus.com/bid/107564 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-1570

https://notcve.org/view.php?id=CVE-2019-1570

26 Mar 2019 — The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings. La herramienta Expedition Migration, en versiones 1.1.8 y anteriores, podría permitir que un atacante autenticado ejecute JavaScript o HTML arbitrarios en las opciones del servidor LDAP. • http://www.securityfocus.com/bid/107564 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-1569

https://notcve.org/view.php?id=CVE-2019-1569

26 Mar 2019 — The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user. La herramienta Expedition Migration, en versiones 1.1.8 y anteriores, podría permitir que un atacante autenticado ejecute JavaScript o HTML arbitrarios en las opciones de mapeo de usuarios para el nombre de cuenta del usuario administrador. • http://www.securityfocus.com/bid/107564 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 26%CPEs: 1EXPL: 1

CVE-2018-10143

https://notcve.org/view.php?id=CVE-2018-10143

12 Dec 2018 — The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application. La versión 1.0.107 de la herramienta Palo Alto Networks Expedition Migration podría permitir a un atacante no autenticado con acceso remoto ejecutar comandos a nivel del sistema en el dispositivo que aloje este servicio/aplicación. • http://www.securityfocus.com/bid/106174 • CWE-269: Improper Privilege Management •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-10142

https://notcve.org/view.php?id=CVE-2018-10142

27 Nov 2018 — The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system. La herramienta Expedition Migration 1.0.106 y anteriores podría permitir que un atacante no autenticado enumere archivos en el sistema operativo. • http://www.securityfocus.com/bid/106069 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •