Unrated severityCISA KEVNVD Advisory· Published Oct 9, 2024· Updated Oct 21, 2025
Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVE-2024-9465
Description
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
Affected products
1- Palo Alto Networks/Expeditionv5cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*Range: 1.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.