Paloaltonetworks Expedition Migration Tool — known CVE vulnerabilities

Every CVE whose affected-product data names Paloaltonetworks Expedition Migration Tool, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-1977 — CVSS 7.5 (high): Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack…
• CVE-2019-1567 — CVSS 5.4 (medium): The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping…
• CVE-2019-1574 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated…