ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

Cross site scripting

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2018-0059

CVE-2018-0059 concerns a stored cross-site scripting vulnerability in Juniper ScreenOS (GUI). The issue is triggered by an authenticated remote user who can inject Web/script content, potentially stealing data and credentials from a web administration session and tricking another admin into unint...

CVE-2018-0059 ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

CVE-2018-0059: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...

PT-2018-8591

Name of the Vulnerable Software and Affected Versions: Juniper Networks ScreenOS versions prior to 6.3.0r26 Description: A persistent cross-site scripting issue in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML, potentially stealing...

Design/Logic Flaw

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or services protected b...

CVE-2018-0018

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or services protected b...

CVE-2018-0018

The CVE affects SRX Series devices running Junos OS where IDP policies are compiled. A crafted packet may bypass firewall rules during IDP policy compilation, causing information disclosure and potential control of the target or protected devices. Affected Junos OS releases are 12.1X46 before D60...

Juniper Gather Device General Information

This module collects a Juniper ScreenOS and JunOS device information and configuration...

Juniper ScreenOS < 6.3.0r25 Etherleak Vulnerability (JSA10841)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r25. It is, therefore, affected by a flaw that may allow a remote attacker on the same network segment to gain access to fragments of system memory or data from previously submitted packets. Note that Nessus has not...

Juniper ScreenOS Information Disclosure Vulnerability (CNVD-2018-04211)

Juniper ScreenOS is a Juniper Networks operating system that runs in the NetScreen family of firewalls. A security vulnerability exists in Juniper ScreenOS version 6.3.0r25, which arises from the program's failure to zero-pad Ethernet packets. An attacker could exploit the vulnerability to obtain...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the following Juniper Security Advisori...

CVE-2018-0014

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

CVE-2018-0014

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

Design/Logic Flaw

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

CVE-2018-0014

Summary: CVE-2018-0014 is an Etherleak-related information disclosure in Juniper ScreenOS. Affected products/versions: Juniper ScreenOS prior to 6.3.0r25 (all versions affected before the fixed release). Root cause: Ethernet frames are not padded with zeros, causing fragments of system memory or ...

CVE-2018-0014 ScreenOS: Etherleak vulnerability found on ScreenOS device

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

PT-2018-8565

Name of the Vulnerable Software and Affected Versions: Juniper Networks ScreenOS versions prior to 6.3.0r25 Description: The issue arises because Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros. As a result, some packets can contain fragments of system memory or data from...

CVE-2018-0014: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...