Cross site scripting

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

CVE-2014-2712

The CVE-2014-2712 entry describes a cross-site scripting (XSS) in Juniper Junos J-Web that affects multiple Junos releases (e.g., before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R1 and related 12.1X4x/12.1X46 lines) where J-Web’s index.php accepts uns...

CVE-2014-2711: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 BBE, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, a...

CVE-2014-2712: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web...

Juniper JunOS J-Web系统监控脚本插入漏洞

CVE ID:CVE-2014-2711 Junos是用在Juniper Networks硬件系统内的应用开发平台或网络操作系统。 Juniper JunOS没有正确过滤J-Web内使用的某些输入，这可导致插入任意HTML和脚本代码，然后在受影响站点用户浏览器中执行。 0 Juniper Networks JUNOS 13.x Juniper Networks JUNOS 12.x Juniper Networks JUNOS 11.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

Juniper JunOS J-Web多个跨站脚本漏洞

CVE ID:CVE-2014-2712 Junos是用在Juniper Networks硬件系统内的应用开发平台或网络操作系统。 Juniper JunOS没有正确过滤index.php内使用的某些输入，这可导致插入任意HTML和脚本代码，然后在受影响站点用户浏览器中执行。成功利用此漏洞需要启用J-Web。 0 Juniper Networks JUNOS 13.x Juniper Networks JUNOS 12.x Juniper Networks JUNOS 11.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

PT-2014-1956

Name of the Vulnerable Software and Affected Versions Junos versions prior to 10.0S25 Junos versions 10.4 prior to 10.4R10 Junos versions 11.4 prior to 11.4R11 Junos versions 12.1 prior to 12.1R9 Junos versions 12.1X44 prior to 12.1X44-D30 Junos versions 12.1X45 prior to 12.1X45-D20 Junos version...

PT-2014-4877

Name of the Vulnerable Software and Affected Versions Junos versions prior to 11.4R11 Junos versions 11.4X27 prior to 11.4X27.62 BBE Junos versions 12.1 prior to 12.1R9 Junos versions 12.1X44 prior to 12.1X44-D35 Junos versions 12.1X45 prior to 12.1X45-D25 Junos versions 12.1X46 prior to...

Juniper Junos J-Web Persistent XSS (JSA10619)

According to its self-reported version number, the remote Junos device is affected by a stored cross-site scripting vulnerability due to a failure to sanitize user-supplied input to the J-Web interface. An attacker can exploit this vulnerability to execute arbitrary JavaScript in the context of t...

Juniper Junos J-Web Sajax Remote Code Execution (JSA10560)

According to its self-reported version number, the remote Junos device is affected by a remote code execution vulnerability due to a lack of validation when passing input from the 'rs' parameter to the '/jsdm/ajax/port.php' script. Authenticated users, when J-Web is enabled, can execute arbitrary...

Juniper Junos J-Web - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Sense of Security - Security Advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating...

Juniper Networks Junos OS CSRF Protection Bypass Vulnerability in J-Web

A CSRF Protection bypass in J-Web allows an attacker to gain unauthorized access to the affected device. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Junos J-Web - Privilege Escalation

Juniper Junos J-Web - Privilege Escalation Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affecte...

Juniper Junos J-Web - Privilege Escalation

Sense of Security - Security Advisory - SOS-13-003 security advisory Release Date. 10-Sep-2013 Last Update. - Vendor Notification Date. 27-Sep-2012 Product. Juniper Junos J-Web Platform. Junos Affected versions. All builds prior to 2013-02-28 are affected Severity Rating. Medium Impact. Privilege...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

Design/Logic Flaw

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-6618

CVE-2013-6618 affects Juniper Junos J-Web (Sajax) via jsdm/ajax/port.php. The root cause is a lack of input validation in the Sajax handle client request that processes the rsargs parameter in an exec action, enabling remote authenticated users to execute arbitrary commands with administrative pr...

CVE-2013-6618: Improper Input Validation

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action...

CVE-2013-4689

J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...