CVEvulnerability
CVE-2019-1569
4.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.8 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.
Affected configurations
• paloaltonetworks expedition (<= 1.1.8)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/107564 Third Party Advisory, VDB Entry
- https://securityadvisories.paloaltonetworks.com/Home/Detail/142 Third Party Advisory
- https://www.tenable.com/security/research/tra-2019-13 Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/107564 Third Party Advisory, VDB Entry
- https://securityadvisories.paloaltonetworks.com/Home/Detail/142 Third Party Advisory
- https://www.tenable.com/security/research/tra-2019-13 Exploit, Third Party Advisory