CVE-2025-0104

No fix known EPSS <1%CVSS 7.0

A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that allows phishing attacks and could lead to Expedition browser-session theft.

Published 2025-01-11 · CVE record · OSV

Products: Palo Alto Networks Cloud NGFW, Palo Alto Networks Expedition, Palo Alto Networks Panorama, Palo Alto Networks PAN-OS, Palo Alto Networks Prisma Access