Lucene search
+L

3 matches found

NVD
NVD
added 2020/10/16 9:15 p.m.28 views

CVE-2020-1673

Insufficient Cross-Site Scripting XSS protection in Juniper Networks J-Web and web based HTTP/HTTPS services allows an unauthenticated attacker to hijack the target user's HTTP/HTTPS session and perform administrative actions on the Junos device as the targeted user. This issue only affects Junip...

8.8CVSS0.01556EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/16 8:31 p.m.61 views

CVE-2020-1673

CVE-2020-1673 is a J-Web/XSS vulnerability in Juniper Networks Junos OS where insufficient XSS protection on HTTP/HTTPS web services can allow an unauthenticated attacker to hijack a user session and impersonate the targeted user’s admin actions. Affected products are Junos OS devices with HTTP/H...

8.8CVSS8.4AI score0.01556EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/16 8:31 p.m.28 views

CVE-2020-1673 Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services

Insufficient Cross-Site Scripting XSS protection in Juniper Networks J-Web and web based HTTP/HTTPS services allows an unauthenticated attacker to hijack the target user's HTTP/HTTPS session and perform administrative actions on the Junos device as the targeted user. This issue only affects Junip...

8.8CVSS8.2AI score0.01556EPSS
SaveExploits0References1
Rows per page
Query Builder