CVE-2019-1574

5.4 mediumEPSS 0.6%

Medium (5.4) in paloaltonetworks expedition migration tool. EPSS 0.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:expedition_migration_tool

References

http://www.securityfocus.com/bid/107900
https://security.paloaltonetworks.com/CVE-2019-1574
http://www.securityfocus.com/bid/107900
https://security.paloaltonetworks.com/CVE-2019-1574

Check your stack JSON