← CVE Intelligence

CVE-2025-0104

Expedition: Cross-Site Scripting (XSS) Vulnerability PUBLISHED

Description (CNA)

A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that allows phishing attacks and could lead to Expedition browser-session theft.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / Expeditionaffected 1 before 1.2.100
Palo Alto Networks / Panoramaunaffected All
Palo Alto Networks / PAN-OSunaffected All
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.