Juniper Junos J-Web Persistent XSS (JSA10619)

According to its self-reported version number, the remote Junos device is affected by a stored cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the J-Web interface. An attacker can exploit this vulnerability to execute arbitrary JavaScript in the context of t...

Juniper JunOS J-Web系统监控脚本插入漏洞

CVE ID:CVE-2014-2711 Junos是用在Juniper Networks硬件系统内的应用开发平台或网络操作系统。 Juniper JunOS没有正确过滤J-Web内使用的某些输入，这可导致插入任意HTML和脚本代码，然后在受影响站点用户浏览器中执行。 0 Juniper Networks JUNOS 13.x Juniper Networks JUNOS 12.x Juniper Networks JUNOS 11.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

Juniper Junos J-Web Sajax Remote Code Execution (JSA10560)

According to its self-reported version number, the remote Junos device is affected by a remote code execution vulnerability due to a lack of validation when passing input from the 'rs' parameter to the '/jsdm/ajax/port.php' script. Authenticated users, when J-Web is enabled, can execute arbitrary...

Juniper Junos J-Web - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Sense of Security - Security Advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating...

Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web

A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Junos J-Web - Privilege Escalation

Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating. Medium Impact. Privilege...

Juniper Junos J-Web - Privilege Escalation

Juniper Junos J-Web - Privilege Escalation Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affecte...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

Design/Logic Flaw

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

CVE-2013-6618 affects Juniper Junos J-Web (Sajax) via jsdm/ajax/port.php. The root cause is a lack of input validation in the Sajax handle client request that processes the rsargs parameter in an exec action, enabling remote authenticated users to execute arbitrary commands with administrative pr...

CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...

Cross site request forgery (csrf)

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...

CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...

CVE-2013-4689

CVE-2013-4689 affects Juniper Junos J-Web, where CSRF protection can be bypassed to hijack administrator authentication. Affected Junos releases include before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before...

Juniper Junos J-Web CSRF Protection Bypass (JSA10597)

According to its self-reported version number, the remote Juniper Junos device has a cross-site request forgery XSRF vulnerability in J-Web. Successful exploitation of this issue could allow an attacker to take complete control of the device. TRUSTED...

Juniper Junos SSL/TLS Renegotiation DoS (JSA10580)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The SSL/TLS implementation on the remote host allows clients to renegotiate connections. The computational requirements for renegotiating a connection are asymmetrical...

Juniper Junos J-Web Remote Code Execution (PSN-2013-04-914)

According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. When J-Web is enabled, authenticated users can execute arbitrary commands. This could allow an unprivileged user e.g., read only access to get complete administrative access. A remote...

Juniper Junos J-Web URL Encoding Heap-Based Buffer Overflow (PSN-2013-01-807)

According to its self-reported version number, the remote Junos device has a heap-based buffer overflow in the J-Web component. Sending an unspecified request related to URL encoding can corrupt heap memory. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenabl...

Juniper Junos J-Web Hash Collision DoS (PSN-2012-07-650)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability in the J-Web component. It is possible to send requests to the web server that result in hash collisions, resulting in CPU consumption. C Tenable Network Security, Inc. include"compat.inc"...