PT-2022-6651 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.1R3-S9 Junos OS versions 19.2 prior to 19.2R3-S6 Junos OS versions 19.3 prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S9 Junos OS versions 20.1 prior to 20.1R3-S5 Junos OS versions 20.2 prior to...

Cross site scripting

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

Juniper Junos debug.php J-Web Component Unauthenticated Debug Access (PSN-2011-02-158)

According to its self-reported version number, the remote device is running a version of Junos with a vulnerable J-Web component. The 'debug.php' file was inadvertently included with this Junos release. This file enables unspecified debugging functions and output. A remote, unauthenticated attack...