Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-1571

19
FAUCET Score

CVE-2019-1571 describes a stored cross-site scripting (XSS) vulnerability in the Palo Alto Networks Expedition Migration tool versions 1.1.8 and earlier, allowing an authenticated attacker to inject arbitrary JavaScript or HTML into the RADIUS server settings. With a CVSS score of 4.8 (Medium), this vulnerability requires high privileges (PR:H) and user interaction (UI:R) for exploitation, potentially leading to limited impact on confidentiality and integrity (C:L, I:L). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.1.8CPE matchmatch criteria
cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

4.8MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.7
Impact Score
2.7
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.06%
Probability of exploitation in next 30 days
EPSS Percentile
61.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0106 is in the 94th percentile among its peer group of 4,937 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

aristavendor investigatingvia llm_extracted
opencartvendor investigatingvia llm_extracted
payloadcmsvendor investigatingvia llm_extracted
qlikvendor investigatingvia llm_extracted
safarivendor investigatingvia llm_extracted

Vendor Advisories (5)

aristallm-arista-a912ea28e20c257cLOW

Palo Alto Expedition Migration Tool 1.1.8 and earlier - Multiple XSS

Mar 22, 2019
opencartllm-opencart-cb52b65ce5cb0c86LOW

Palo Alto Expedition Migration Tool 1.1.8 and earlier - Multiple XSS

Mar 22, 2019
safarillm-safari-3be4a688835ab917LOW

Palo Alto Expedition Migration Tool 1.1.8 and earlier - Multiple XSS

Mar 22, 2019
payloadcmsllm-payloadcms-ad0d6a0d358668b4LOW

Palo Alto Expedition Migration Tool 1.1.8 and earlier - Multiple XSS

Mar 22, 2019
qlikllm-qlik-5a92fff2b0b870dbLOW

Palo Alto Expedition Migration Tool 1.1.8 and earlier - Multiple XSS

Mar 22, 2019

References

securityadvisories.paloaltonetworks.com / Home/Detail/142
Third Party Advisory
tenable.com / security/research/tra-2019-13
ExploitThird Party Advisory
securityfocus.com / bid/107564
Third Party AdvisoryVDB Entry