CVE-2018-0001

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0001

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0001

CVE-2018-0001 affects Junos OS via the J-Web interface: a use-after-free defect in older PHP handling could allow an unauthenticated remote code execution by crafting data sent to specific PHP URLs. Affected Junos releases include 12.1X46 (before 12.1X46-D67), 12.3 (before 12.3R12-S5), 12.3X48 (b...

CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

Cross site request forgery (csrf)

J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...

CVE-2016-4923

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

Cross site scripting

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

CVE-2016-1261

J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...

CVE-2016-4923 Junos J-Web: Cross Site Scripting Vulnerability

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

CVE-2016-1261 Junos: vulnerabilities in J-Web (CVE-2016-1261)

J-Web does not validate certain input that may lead to cross-site request forgery CSRF issues or cause a denial of J-Web service DoS...

CVE-2016-1261

CVE-2016-1261 affects Junos J-Web; the issue arises from input not being validated, which may enable cross-site request forgery (CSRF) and could cause a denial of service (DoS). The provided documents identify CSRF/DoS as outcomes but do not specify affected versions, root cause details beyond in...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...

Juniper Junos J-Web Reflected XSS (JSA10764)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a cross-site scripting vulnerability in the J-web component due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Junos J-Web Cross-Site Scripting Attack Vulnerability

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A cross-site scripting attack vulnerability exists in Juniper Junos J-Web, which could be exploited by an...

Juniper Networks Junos OS J-Web XSS Vulnerability

Junos OS J-Web is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; ...

CVE-2016-1279

J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before...

CVE-2016-1279

J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before...

CVE-2016-1279

J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before...

CVE-2016-1279

CVE-2016-1279 affects Juniper Networks Junos OS J-Web. The vulnerability could allow a remote attacker to obtain sensitive information and thereby gain administrative privileges via unspecified vectors. Affected Junos versions include J-Web on 12.1X46-D45/50, 12.1X47-D35, 12.3R12, 12.3X48-D25, 13...

Juniper Junos J-Web Service Privilege Escalation (JSA10754)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a privilege escalation vulnerability in the J-Web service that allows an unauthenticated, remote attacker to disclose sensitive information and gain administrative privileges. TRUSTED...