Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2015-5361

🗓️ 28 Feb 2020 22:25:24Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 153 Views🌐 WEB

Background & issue with the FTP ALG inspecting unencrypted control channel in the context of ftps-extensions option

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
0day.today		Qlikview 11.20 SR11 - Blind XXE Injection Vulnerability
9 Sep 201500:00
–zdt
Circl		CVE-2015-5361
29 Feb 202002:33
–circl
Cvelist		CVE-2015-5361 Junos: FTPS through SRX opens up wide range of data channel TCP ports
28 Feb 202022:25
–cvelist
Exploit DB		Qlikview 11.20 SR11 - Blind XML External Entity Injection
9 Sep 201500:00
–exploitdb
EUVD		EUVD-2015-5317
7 Oct 202500:30
–euvd
exploitpack		Qlikview 11.20 SR11 - Blind XML External Entity Injection
9 Sep 201500:00
–exploitpack
Tenable Nessus		Juniper Junos SRX Series FTP ALG ftps-extension TCP Port Exposure (JSA10706)
26 Oct 201500:00
–nessus
NVD		CVE-2015-5361
28 Feb 202023:15
–nvd
OpenVAS		Juniper Networks Junos OS FTPS-Extensions Vulnerability
23 Nov 201500:00
–openvas
Packet Storm		Qlikview 11.20 SR4 Blind XXE Injection
9 Sep 201500:00
–packetstorm
Rows per page
NVD
Node
juniperjunosMatch12.1x44-
OR
juniperjunosMatch12.1x44d10
OR
juniperjunosMatch12.1x44d15
OR
juniperjunosMatch12.1x44d20
OR
juniperjunosMatch12.1x44d25
OR
juniperjunosMatch12.1x44d30
OR
juniperjunosMatch12.1x44d35
OR
juniperjunosMatch12.1x44d40
OR
juniperjunosMatch12.1x44d45
OR
juniperjunosMatch12.1x44d50
OR
juniperjunosMatch12.1x46-
OR
juniperjunosMatch12.1x46d10
OR
juniperjunosMatch12.1x46d15
OR
juniperjunosMatch12.1x46d20
OR
juniperjunosMatch12.1x46d25
OR
juniperjunosMatch12.1x46d30
OR
juniperjunosMatch12.1x46d35
OR
juniperjunosMatch12.1x46-d10
OR
juniperjunosMatch12.1x47-
OR
juniperjunosMatch12.1x47d10
OR
juniperjunosMatch12.1x47d15
OR
juniperjunosMatch12.1x47d20
OR
juniperjunosMatch12.3x48-
OR
juniperjunosMatch12.3x48d10
OR
juniperjunosMatch12.3x48d15
OR
juniperjunosMatch15.1x49-
AND
junipersrx100Match-
OR
junipersrx110Match-
OR
junipersrx1400Match-
OR
junipersrx1500Match-
OR
junipersrx210Match-
OR
junipersrx220Match-
OR
junipersrx240Match-
OR
junipersrx240h2Match-
OR
junipersrx300Match-
OR
junipersrx320Match-
OR
junipersrx340Match-
OR
junipersrx3400Match-
OR
junipersrx345Match-
OR
junipersrx3600Match-
OR
junipersrx380Match-
OR
junipersrx4000Match-
OR
junipersrx4100Match-
OR
junipersrx4200Match-
OR
junipersrx4600Match-
OR
junipersrx5000Match-
OR
junipersrx5400Match-
OR
junipersrx550Match-
OR
junipersrx550_hmMatch-
OR
junipersrx550mMatch-
OR
junipersrx5600Match-
OR
junipersrx5800Match-
OR
junipersrx650Match-
ParameterPositionPathDescriptionCWE
XML payload in POST bodypathAccessPoint.aspxQlikView XXE vulnerability enabling blind SSRF via XML in POST body to AccessPoint.aspx (CVE-2015-3623)CWE-326

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 02:32Current
6.3Medium risk
Vulners AI Score6.3
CVSS 25.8
CVSS 3.16.5
EPSS0.00127
CWE-326
ftpftpsalgsecuritysrxfirewalldata channelportencryptionnvd
153