CVE-2024-9465 — Vulnetix

CVE-2024-9465 PUBLISHED KEV

Es besteht eine Schwachstelle in PaloAlto Networks Expedition aufgrund unzureichender Bereinigung, die zu SQL-Injection führt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um das System zu manipulieren, beliebige Dateien zu erstellen oder zu lesen und vertrauliche Informationen wie Passwort-Hashes, Benutzernamen und Konfigurationen offenzulegen.

EPSS 94.29% · 99.9th percentile

Risk Scores

EPSS Score

94.29%

99.9th percentile

Affected Products

Vendor	Product	Versions
PaloAlto Networks	PaloAlto Networks Expedition <1.2.96

Exploit Intelligence

Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465) (github-poc)
Proof of Concept Exploit for CVE-2024-9465 (github-poc)
Proof of Concept Exploit for CVE-2024-9465 (github-poc)
Proof of Concept Exploit for CVE-2024-9465 (github-poc)

…and 51 more exploits

Timeline

Oct 9, 2024 CVE Published
Oct 10, 2024 PoC Published
Oct 10, 2024 EPSS Score
Oct 14, 2024 Coalition ESS Score
Oct 16, 2024 EPSS Score
Oct 17, 2024 Coalition ESS Score
Oct 17, 2024 Coalition ESS Score
Oct 18, 2024 EPSS Score
Oct 29, 2024 EPSS Score
Nov 14, 2024 CISA KEV Added
Nov 14, 2024 Coalition ESS Score
Nov 15, 2024 Coalition ESS Score

References

Open in Interactive Console →