Back to CVE Browser

CVE-2024-9465

🔥 Known Exploited (CISA KEV)CRITICAL

9.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-10-09

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.

Affected Platforms (CPE)

📦

Paloaltonetworks

Expedition

>= 1.2.0 and < 1.2.96

References & Advisories

🔗 https://security.paloaltonetworks.com/PAN-SA-2024-0010

🔗 https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9465

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

Related Vulnerabilities

In the Linux kernel, the following vulnerability has been resolved: xfrm: move policy_bydst RCU sync from per-netns .exit to .pre...

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: avoid stalls in fq_pie_timer() When setti...

CVE-2022-503325.5

In the Linux kernel, the following vulnerability has been resolved: video/aperture: Call sysfb_disable() before removing PCI devi...

CVE-2023-531884.7

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix race on port output assume the followi...