Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2025-0104

Expedition: Cross-Site Scripting (XSS) Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that allows phishing attacks and could lead to Expedition browser-session theft.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Expedition

Default version status: unaffected

  • 1 to < 1.2.100affected

Palo Alto Networks Panorama

Default version status: unaffected

  • Allunaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References