Lucene search
+L

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10698)

🗓️ 16 Oct 2015 00:00:00Reported by Copyright (C) 2015 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 56 Views

Juniper Networks Junos Space Multiple Vulnerabilities (JSA10698) CPE "cpe:/a:juniper:junos_space"; Vulnerabilities include cross site scripting (XSS), SQL injection and command injection allowing remote unauthenticated network based attacker with access to Junos Space to execute arbitrary code. Affected versions: prior to 15.1R1. Update to version 15.1R1 or later

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities have been identified in Oracle MySQL shipped with IBM Tivoli Network Manager IP Edition (Oracle Advisory - April 2015)
17 Jun 201815:01
ibm
ibm
IBM Security Bulletins
Security Bulletin: Tivoli Common Reporting iFixes for multiple Security Vulnerabilities (CVE-2014-3566,CVE-2014-6145,CVE-2014-1568,CVE-2014-4263,CVE-2014-3513,CVE-2014-3567,CVE-2014-3568,CVE-2014-0107,CVE-2014-0075,CVE-2014-0096,CVE-2014-0099,CVE-2014-011
17 Jun 201814:55
ibm
ibm
IBM Security Bulletins
Security Bulletins for IBM Tealeaf Customer Experience offerings
16 Jun 201819:35
ibm
ibm
IBM Security Bulletins
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.33
8 Sep 202200:26
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Content Collector for SAP Applications affected by vulnerabilities in IBM SDK Java™ Technology Edition, Version 6 and Version 7 (CVE-2014-3566, CVE-2014-4244, CVE-2014-4263, CVE-2014-6457, CVE-2014-6468)
17 Jun 201812:09
ibm
ibm
IBM Security Bulletins
Security Bulletin: Network Intrusion Prevention System is affected by multiple Apache web server vulnerabilities (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)
23 Feb 202219:21
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities exist in the current IBM SDK for Java used in IBM System Networking Switch Center (CVE-2014-0411 & CVE-2014-0460)
8 Jul 201916:13
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in IBM Multi-Enterprise Integration Gateway (CVE-2014-0460, CVE-2014-0878, CVE-2014-0453)
16 Jun 201819:37
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM): (CVE-2014-0453, CVE-2014-0460 and CVE-2014-0878)
31 Jan 201901:35
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java™ Technology Edition affect IBM SmartCloud Provisioning (CVE-2014-0878, CVE-2014-0460, CVE-2014-0453).
17 Jun 201822:30
ibm
Rows per page
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:juniper:junos_space";

if (description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.105408");
  script_version("2026-04-24T06:23:04+0000");
  script_tag(name:"last_modification", value:"2026-04-24 06:23:04 +0000 (Fri, 24 Apr 2026)");
  script_tag(name:"creation_date", value:"2015-10-16 20:11:07 +0200 (Fri, 16 Oct 2015)");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");

  script_cve_id("CVE-2015-7753", "CVE-2014-0429", "CVE-2014-0456", "CVE-2014-0460",
                "CVE-2014-0453", "CVE-2015-0975", "CVE-2015-3209", "CVE-2014-1568",
                "CVE-2013-2249", "CVE-2013-6438", "CVE-2014-0098", "CVE-2014-6491",
                "CVE-2014-6500", "CVE-2015-0501", "CVE-2014-6478", "CVE-2014-6494",
                "CVE-2014-6495", "CVE-2014-6496", "CVE-2014-6559", "CVE-2015-2620",
                "CVE-2013-5908");

  script_tag(name:"qod_type", value:"remote_banner");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("Juniper Networks Junos Space Multiple Vulnerabilities (JSA10698)");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2015 Greenbone AG");
  script_family("JunOS Local Security Checks");
  script_dependencies("gb_juniper_junos_space_consolidation.nasl");
  script_mandatory_keys("juniper/junos/space/detected");

  script_tag(name:"summary", value:"Juniper Networks Junos Space is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"These vulnerabilities include cross site scripting (XSS), SQL
  injection (SQLi) and command injection vulnerabilities.");

  script_tag(name:"impact", value:"These vulnerabilities may potentially allow a remote
  unauthenticated network based attacker with access to Junos Space to execute arbitrary code on
  Junos Space.");

  script_tag(name:"affected", value:"Juniper Networks Junos Space versions prior to 15.1R1.");

  script_tag(name:"solution", value:"Update to version 15.1R1 or later.");

  script_xref(name:"URL", value:"http://kb.juniper.net/JSA10698");

  exit(0);
}

include("host_details.inc");
include("junos.inc");
include("version_func.inc");

if (!version = get_app_version(cpe: CPE, nofork: TRUE))
  exit(0);

version = toupper(version);

if (check_js_version(ver: version, fix: "15.1R1")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "15.1R1");
  security_message(port: 0, data: report);
  exit(0);
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation