CrowdSecLive Exploit Tracker
00/10
CrowdSec Score

Palo Alto Expedition - Information Disclosure (CVE-2024-9465)

Published on09-10-2024
First seen on17-12-2025
XXX
Exploiting IPs reported

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.

CrowdSec analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Exploitation

Get real-time information about exploitation attempts and actors involved.

Exploit Timeline

This timeline shows the history of exploitation attempts for this CVE, as detected by the CrowdSec community.

Unlock the Exploitation timeline with the
CrowdSec Live Exploit Tracker plan

Detected IPs

Discover the IPs that targeted this vulnerability across the CrowdSec Network.

Protection

Find out relevant information to protect your stack against this CVE.

glow

Stay Protected against CVE Exploiters

Quick Download icon

Quick Download

Get the list of IPs exploiting this vulnerability

Download
Firewall Sync icon

Firewall Sync

Sync with your firewall a live feed of IPs exploiting this vulnerability

Sync
JSON Live Feed icon

JSON Live Feed

Access a dedicated API endpoint to get a live JSON feed

Get The Feed