CVE-2025-0103

9.2 criticalEPSS 0.6%

Critical (9.2) in paloaltonetworks expedition. EPSS 0.6% chance of exploitation in the next 30 days.

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

Severity

CVSS 4.0

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:expedition

References

https://security.paloaltonetworks.com/PAN-SA-2025-0001

Check your stack JSON