CVE-2019-1570: Palo Alto Networks Expedition

Medium severity, CVSS 4.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.

Affected products

• Palo Alto Networks Expedition: up to and including 1.1.8

Published 2019-03-26. Last modified 2026-06-17.