Log in Start free

Vulnerability · Published Jan 11, 2025 · Assigned by palo_alto

CVE-2025-0103Expedition: SQL Injection Vulnerability

Critical 9.2

In plain English

A critical-severity SQL injection in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).

Severity (CVSS 4.0)9.2Critical
Exploit odds (30 days)0.6%top 50.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

Affected products (as reported)

VendorProductVersions
Palo Alto Networks Cloud NGFW see references
Palo Alto Networks Expedition 1 – before 1.2.100
Palo Alto Networks Panorama see references
Palo Alto Networks PAN-OS see references
Palo Alto Networks Prisma Access see references

Weakness: CWE-89 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber

References