Cross-site scripting in Palo Alto Networks Expedition Migration Tool
Priority LOW 24CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.
Why it matters now
EPSS 0.01063 64th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Palo Alto | Palo Alto Networks Expedition Migration Tool | Expedition 1.1.8 and earlier | — | No fix listed | CNA |
- Palo Alto Networks Expedition Migration Tool VendorPalo Alto Affected Expedition 1.1.8 and earlier Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:* | up to 1.1.8 | Vulnerable | CyberArk Software, a Palo Alto Networks Company |
- cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:* Versions up to 1.1.8 Vulnerable ·CyberArk Software, a Palo Alto Networks Company
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-1570
- 2026-10-03 Alias added: GHSA-cc8g-5rh7-vpvx
References
More Palo Alto vulnerabilities
- TI-2019-01203 OS command injection in Palo Alto Networks PAN-OS CVSS 3.1HIGH 8.8
- TI-2019-01202 Information disclosure in Palo Alto Networks PAN-OS CVSS 3.1HIGH 8.8
- TI-2009-02514 Clientless SSL VPN products break web browser domain-based security models CVSS 2.0MEDIUM 6.8
- TI-2019-01198 Cross-site scripting in Palo Alto Networks Expedition Migration Tool CVSS 3.0MEDIUM 4.8
- TI-2019-01196 Cross-site scripting in Palo Alto Networks Expedition Migration Tool CVSS 3.0MEDIUM 4.8
- TI-2012-03458 Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2019-1570 · CVE Program
- CVE-2019-1570 · NVD
- FIRST EPSS
- GHSA-cc8g-5rh7-vpvx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences