The vulnerability of Juniper SRX 240 router microprogramming software allows a attacker to bypass the CSRF protection of the J-Web interface.

The Juniper SRX 240 router software contains a vulnerability in the Sajax AJAX library, which stems from the lack of checking the “csrftoken” parameter for GET requests...

Juniper Junos J-Web Service Multiple Vulnerabilities (JSA10723)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple flaws in the J-Web service that allow an unauthenticated, remote attacker to conduct a cross-site request forgery XSRF attack or to cause a denial of service condition. TRUSTED...

Juniper Networks Junos OS Has Multiple Vulnerabilities

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. Juniper Networks Junos OS fails to properly handle J-Web input, allowing remote attackers to exploit the vulnerability for cross-site request forgery and denial of service attacks...

Juniper Junos HTTP Request Handling J-Web DoS (JSA10720)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Embedthis Appweb Server when processing malformed HTTP requests. An unauthenticated, remote attacker can exploit this to crash the J-Web service...

Juniper Networks Junos OS Embedthis Appweb Server DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with J-Web enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1258

Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers t...

PT-2016-4675

Name of the Vulnerable Software and Affected Versions Embedthis Appweb versions prior to 12.1X44-D60 Embedthis Appweb versions 12.1X46 prior to 12.1X46-D45 Embedthis Appweb versions 12.1X47 prior to 12.1X47-D30 Embedthis Appweb versions 12.3 prior to 12.3R10 Embedthis Appweb versions 12.3X48 prio...

CVE-2016-1258: Improper Input Validation

Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers t...

Juniper Networks Junos OS J-Web SRX5000-Series DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability in J-Web. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; ...

Juniper Networks vSRX virtual denial of service vulnerability

Juniper Networks vSRX virtual is a firewall emulator product from Juniper Networks, Inc.J-Web is one of the network management tools. A security vulnerability in the J-Web service in the Juniper Networks vSRX virtual firewall used in Junos OS versions prior to 15.1X49-D20 can be exploited by a...

Juniper Junos SRX5000-series J-Web DoS (JSA10700)

According to its self-reported version number, the remote Juniper Junos SRX5000 series device is affected by a denial of service vulnerability related to the J-Web service. An unauthenticated, remote attacker can exploit this to cause the system to drop into a debug prompt, effectively halting...

Design/Logic Flaw

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service system reboot via unspecified vectors...

CVE-2014-6451

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service system reboot via unspecified vectors...

CVE-2014-6451

Summary: CVE-2014-6451 affects Juniper Networks Junos OS J-Web on SRX5000-series devices, where the J-Web service is vulnerable to a remote denial of service that causes a system reboot. The vulnerability is described with unspecified vectors. Public references in connected data identify the issu...

CVE-2014-6451: Undefined Security Weakness

J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service system reboot via unspecified vectors...

Juniper Junos J-Web Multiple Vulnerabilities (JSA10682)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities in the J-Web component : - A cross-site scripting vulnerability exists due to a failure to validate input before returning it to users. A remote attacker, using a crafted request...

Juniper Networks Junos J-Web Cross-Site Scripting Vulnerability

Juniper Networks Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A cross-site scripting vulnerability exists in Juniper Networks Junos, which arises from the program's...

Juniper Networks Junos OS J-Web Multiple Vulnerabilities

Junos OS is prone to multiple error handling vulnerabilities in J-Web. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS J-Web Clickjacking Vulnerability

Junos OS is prone to Clickjacking vulnerability on J-Web. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10679) (FREAK)

According to its self-reported version number, the remote Juniper Junos device is affected by the following vulnerabilities related to OpenSSL : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a remote attacker, using ...