CVE-2019-1574medium
Description
Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View.
References
http://www.securityfocus.com/bid/107900
https://securityadvisories.paloaltonetworks.com/Home/Detail/147
Details
Source: MITRE
Published: 2019-04-12
Updated: 2019-04-15
Type: CWE-79
Risk Information
CVSS v2
Base Score: 3.5
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 6.8
Severity: LOW
CVSS v3
Base Score: 5.4
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Impact Score: 2.7
Exploitability Score: 2.3
Severity: MEDIUM