Arbitrary Code Execution through Cross-Site Scripting (XSS) in Palo Alto Networks Expedition Migration Tool

Arbitrary Code Execution through Cross-Site Scripting (XSS) in Palo Alto Networks Expedition Migration Tool

CVE-2019-1574 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.

Learn more about our Cis Benchmark Audit For Palo Alto Networks.