CVE-2025-0103: Expedition: SQL Injection Vulnerability
An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0103?
CVE-2025-0103 is considered a critical SQL injection vulnerability due to its potential to expose sensitive database contents.
How do I fix CVE-2025-0103?
To fix CVE-2025-0103, update to the latest version of Palo Alto Networks Expedition as recommended in the vendor's security advisory.
Who is affected by CVE-2025-0103?
CVE-2025-0103 affects users of Palo Alto Networks Expedition who have authentication access.
What data can be exposed by CVE-2025-0103?
CVE-2025-0103 can expose sensitive information including password hashes, usernames, device configurations, and API keys.
Is CVE-2025-0103 remotely exploitable?
CVE-2025-0103 requires authenticated access, meaning it cannot be exploited remotely without valid user credentials.