CVE-2014-6447

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

PT-2020-7726

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 12.1X44 through 12.1X44-D45 Juniper Junos OS versions 12.1X46 through 12.1X46-D30 Juniper Junos OS versions 12.1X47 through 12.1X47-D20 Juniper Junos OS versions 12.3 through 12.3R8 Juniper Junos OS versions 12.3X48...

CVE-2014-6447: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

Junos OS: Cross-Site Scripting (XSS) in J-Web (JSA10986)

According to its self-reported version number, the remote Juniper Junos device is affected by a cross-site scripting XSS vulnerability in J-Web due to insufficient XSS protection. An unauthenticated, remote attacker can exploit this, via injecting web script or HTML to hijack the target user's...

CVE-2020-1606

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

CVE-2020-1607

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

CVE-2020-1607

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

Cross site scripting

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

Path traversal

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

CVE-2020-1607 Junos OS: Cross-Site Scripting (XSS) in J-Web

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

CVE-2020-1607

CVE-2020-1607 is a Junos OS/J-Web cross-site scripting vulnerability. The root cause is insufficient XSS protection in J-Web, allowing a remote attacker to inject scripts or HTML to hijack an authenticated user’s J-Web session and perform admin actions. Affected software ranges are extensive, inc...

CVE-2020-1606 Junos OS: Path traversal vulnerability in J-Web

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

CVE-2020-1607: Improper Neutralization of Input During Web Page Generation

Insufficient Cross-Site Scripting XSS protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos device as the targeted user. This issue affects Juniper Networks Junos OS 12.3...

CVE-2020-1606: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

Junos OS vulnerable to directory traversal

Overview Junos OS contains a directory traversal vulnerability CWE-22. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Files on the server may be...

Junos OS vulnerable to cross-site scripting

Overview Junos OS contains a cross-site scripting vulnerability CWE-79. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may be...

JVN#21753370: Junos OS vulnerable to cross-site scripting

Junos OS contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's J-Web screen. Solution Update the Software Update the software to the latest version according to the information provided by the developer. Apply a Workaround Applying...

JVN#07375820: Junos OS vulnerable to directory traversal

Junos OS contains a directory traversal vulnerability CWE-22. Impact Files on the server may be viewed or deleted by an authenticated J-web user. According to the developer, this issue does not affect system files that can be accessed only by root user. Solution Update the Software Update the...

PT-2020-1829

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3R12-S15 Junos OS 12.3X48 versions prior to 12.3X48-D86, 12.3X48-D90 Junos OS 14.1X53 versions prior to 14.1X53-D51 Junos OS 15.1F6 versions prior to 15.1F6-S13 Junos OS 15.1 versions prior to 15.1R7-S5 Junos OS...

Juniper Junos J-Web CVE-2020-1607 Cross Site Scripting Vulnerability

Description Juniper Junos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...