CVE-2025-0103

critical · 9.2

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

9.2

CVSS

0.6%

EPSS (exploit prob.)

48th

EPSS percentile

2025-01-11

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
paloaltonetworks	expedition	< 1.2.101

Check a specific version with /api/v1/cve/match.

References

https://security.paloaltonetworks.com/PAN-SA-2025-0001

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-0103