<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: palo-alto-networks-expedition</title><description>Every new CVE for palo-alto-networks-expedition.</description><link>https://agentprime.io/</link><item><title>CVE-2025-0107: Expedition: OS Command Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-0107/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0107/</guid><description>CVSS 7.7 (High). Critical: CVSS score 7.7 (7.0 or more) and EPSS 0.78 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jan 2025 03:02:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-0106: Expedition: Wildcard Expansion Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-0106/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0106/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jan 2025 03:02:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0105: Expedition: Arbitrary File Deletion Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-0105/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0105/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jan 2025 03:01:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0104: Expedition: Cross-Site Scripting (XSS) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-0104/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0104/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jan 2025 03:00:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0103: Expedition: SQL Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-0103/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0103/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 11 Jan 2025 02:59:51 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-9467: Expedition: Reflected Cross-Site Scripting Vulnerability Leads to Expedition Session Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-9467/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9467/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 17:04:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9466: Expedition: Cleartext Storage of Information Leads to Firewall Admin Credential Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-9466/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9466/</guid><description>CVSS 8.2 (High). Critical: CVSS score 8.2 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 17:04:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-9465: Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-9465/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9465/</guid><description>CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 14 Nov 2024: it is known to be exploited. CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 17:04:01 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-9464: Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-9464/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9464/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.83 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 17:03:33 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-9463: Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-9463/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9463/</guid><description>CVSS 9.9 (Critical). Critical: In CISA’s KEV catalogue since 14 Nov 2024: it is known to be exploited. CVSS score 9.9: 9.0 or more. CVSS score 9.9 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Oct 2024 17:03:12 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-5910: Expedition: Missing Authentication Leads to Admin Account Takeover</title><link>https://agentprime.io/advisories/CVE-2024-5910/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5910/</guid><description>CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 7 Nov 2024: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.92 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jul 2024 18:39:26 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2020-1977: Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.</title><link>https://agentprime.io/advisories/CVE-2020-1977/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1977/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Feb 2020 22:57:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-10143: Palo Alto Networks Expedition: The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an…</title><link>https://agentprime.io/advisories/CVE-2018-10143/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-10143/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Dec 2018 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-10142: The Expedition Migration tool 1.0.106 and earlier may allow an unauthenticated attacker to enumerate files on the operating system.</title><link>https://agentprime.io/advisories/CVE-2018-10142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-10142/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Nov 2018 21:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>