Juniper Junos J-Web XSS (PSN-2012-07-649)

According to its self-reported version number, the remote Junos device has a cross-site scripting vulnerability in the J-Web component. Unspecified input to index.php can result in cross-site scripting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59993;...

Juniper Junos J-Web CPU Utilization DoS (PSN-2012-04-547)

According to its self-reported version number, the J-Web component of the remote Junos system has a denial of service vulnerability. A high rate of inbound HTTP connections over an extended period can result in high CPU utilization, even after the connections are terminated. A remote,...

Juniper Junos J-Web Component Unspecified CSRF (PSN-2012-01-474)

According to its self-reported version number, the J-Web component of the remote Juniper device has a cross-site request forgery vulnerability. A remote attacker could exploit this by tricking a user into making a maliciously crafted request, resulting in a compromise of the device. C Tenable...

Juniper Junos J-Web Administrator Logs XSS (PSN-2011-10-392)

According to its self-reported version number, the J-Web component of the remote Juniper device has a persistent cross-site scripting vulnerability. During the authentication process, user controlled input is added to the administrator logs. When an administrator reviews the logs, that user...

Juniper Junos J-Web Weak SSL Ciphers (PSN-2011-01-147)

According to its self-reported version number, the remote Junos device contains a J-Web component that supports the use of weak SSL ciphers less than 128-bit. Note: This is considerably easier to exploit if the attacker is on the same physical network. C Tenable Network Security, Inc...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...

Juniper Networks Junos OS CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a...

Cross site scripting

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...

CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

CVE-2009-3487

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...

CVE-2009-3485

Cross-site scripting XSS vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI...

CVE-2009-3487

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via 1 the JEXECOUTID parameter in a JEXECMODERELAYOUTPUT action to the jexec program; the 2 act, 3 refresh-time, or 4 ifid...

CVE-2009-3486

CVE-2009-3486 concerns multiple XSS vulnerabilities in the J-Web interface of Juniper JUNOS 8.5R1.14. Remote authenticated users can inject arbitrary script/HTML via host-related parameters across diagnose, configuration, and local-cert actions (examples: pinghost, traceroute, probe-limit, firewa...

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

CVE-2009-3487

CVE-2009-3487 affects Juniper JUNOS 8.5R1.14 through the J-Web interface, with multiple XSS vectors that allow remote authenticated users to inject arbitrary script/HTML. Affected components/functions include: JEXEC_OUTID in JEXEC_MODE_RELAY_OUTPUT for the jexec program; parameters in scripter.ph...

CVE-2009-3485

CVE-2009-3485 is a cross-site scripting (XSS) vulnerability in the J-Web interface of Juniper JUNOS 8.5R1.14 and 9.0R1.1. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI. Affected component: J-Web (Junos OS). Root cause: insufficient input...

Juniper Junos 8.59.0 J - Web Interface PATH_INFO Cross-Site Scripting

Juniper Junos 8.59.0 J - Web Interface PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Junip...

Juniper Junos 8.59.0 J - Web Interface (Multiple Script) m[] Cross-Site Scripting

Juniper Junos 8.59.0 J - Web Interface Multiple Script m Cross-Site Scripting source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to...