CVE-2019-1569

EPSS 1.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Mar 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.

Affected products

Palo Alto · Palo Alto Networks Expedition Migration Tool

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://securityadvisories.paloaltonetworks.com/Home/Detail/142 https://www.tenable.com/security/research/tra-2019-13 http://www.securityfocus.com/bid/107564