CVE-2019-1570

4.8 mediumEPSS 1.1%

Medium (4.8) in paloaltonetworks expedition. EPSS 1.1% chance of exploitation in the next 30 days.

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

Severity

4.8 medium

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19