Read the docs
TI-2018-00056 Aliases CVE-2018-0059GHSA-rxwg-m244-vxc3

ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability

Priority LOW 26CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. Affected releases are Juniper Networks ScreenOS 6.3.0 versions prior to 6.3.0r26.

Why it matters now

EPSS 0.00803 56th percentileScored 2026-11-07
Fix Fixed ScreenOS (Juniper Networks): 6.3.0r26

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperScreenOS6.3.0 to before 6.3.0r266.3.0r26Patch availableCNA
  • ScreenOS VendorJuniper Affected 6.3.0 to before 6.3.0r26 Fixed in 6.3.0r26 Patch available CNA

CPE configurations NVD · 27

CPEVersionsRoleVendor
cpe:2.3:o:juniper:netscreen_screenos:6.3.0:*:*:*:*:*:*:*6.3.0VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r1:*:*:*:*:*:*:*6.3.0r1VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r2:*:*:*:*:*:*:*6.3.0r2VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r3:*:*:*:*:*:*:*6.3.0r3VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r4:*:*:*:*:*:*:*6.3.0r4VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r5:*:*:*:*:*:*:*6.3.0r5VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r6:*:*:*:*:*:*:*6.3.0r6VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r7:*:*:*:*:*:*:*6.3.0r7VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r8:*:*:*:*:*:*:*6.3.0r8VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r9:*:*:*:*:*:*:*6.3.0r9VulnerableJuniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0:*:*:*:*:*:*:* Versions 6.3.0 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r1:*:*:*:*:*:*:* Versions 6.3.0r1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r2:*:*:*:*:*:*:* Versions 6.3.0r2 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r3:*:*:*:*:*:*:* Versions 6.3.0r3 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r4:*:*:*:*:*:*:* Versions 6.3.0r4 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r5:*:*:*:*:*:*:* Versions 6.3.0r5 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r6:*:*:*:*:*:*:* Versions 6.3.0r6 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r7:*:*:*:*:*:*:* Versions 6.3.0r7 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r8:*:*:*:*:*:*:* Versions 6.3.0r8 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r9:*:*:*:*:*:*:* Versions 6.3.0r9 Vulnerable ·Juniper
Show 17 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r10:*:*:*:*:*:*:*6.3.0r10VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r11:*:*:*:*:*:*:*6.3.0r11VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r12:*:*:*:*:*:*:*6.3.0r12VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r13:*:*:*:*:*:*:*6.3.0r13VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r14:*:*:*:*:*:*:*6.3.0r14VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r15:*:*:*:*:*:*:*6.3.0r15VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r16:*:*:*:*:*:*:*6.3.0r16VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r17:*:*:*:*:*:*:*6.3.0r17VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r18:*:*:*:*:*:*:*6.3.0r18VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r19:*:*:*:*:*:*:*6.3.0r19VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r21:*:*:*:*:*:*:*6.3.0r21VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r22:*:*:*:*:*:*:*6.3.0r22VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23:*:*:*:*:*:*:*6.3.0r23VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23b1:*:*:*:*:*:*:*6.3.0r23b1VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24:*:*:*:*:*:*:*6.3.0r24VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24b1:*:*:*:*:*:*:*6.3.0r24b1VulnerableJuniper
cpe:2.3:o:juniper:netscreen_screenos:6.3.0r25:*:*:*:*:*:*:*6.3.0r25VulnerableJuniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r10:*:*:*:*:*:*:* Versions 6.3.0r10 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r11:*:*:*:*:*:*:* Versions 6.3.0r11 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r12:*:*:*:*:*:*:* Versions 6.3.0r12 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r13:*:*:*:*:*:*:* Versions 6.3.0r13 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r14:*:*:*:*:*:*:* Versions 6.3.0r14 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r15:*:*:*:*:*:*:* Versions 6.3.0r15 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r16:*:*:*:*:*:*:* Versions 6.3.0r16 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r17:*:*:*:*:*:*:* Versions 6.3.0r17 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r18:*:*:*:*:*:*:* Versions 6.3.0r18 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r19:*:*:*:*:*:*:* Versions 6.3.0r19 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r21:*:*:*:*:*:*:* Versions 6.3.0r21 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r22:*:*:*:*:*:*:* Versions 6.3.0r22 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23:*:*:*:*:*:*:* Versions 6.3.0r23 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23b1:*:*:*:*:*:*:* Versions 6.3.0r23b1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24:*:*:*:*:*:*:* Versions 6.3.0r24 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24b1:*:*:*:*:*:*:* Versions 6.3.0r24b1 Vulnerable ·Juniper
  • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r25:*:*:*:*:*:*:* Versions 6.3.0r25 Vulnerable ·Juniper

Remediation

  • Fix · CNA ScreenOS (Juniper Networks) Fixed in 6.3.0r26

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0059
  2. 2026-10-03 Alias added: GHSA-rxwg-m244-vxc3

References

Advisory 1

  • TI-2005-02504 Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0… CVSS 2.0MEDIUM 5.0
  • TI-2002-01469 Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial… CVSS 2.0MEDIUM 5.0
  • TI-2004-01323 Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x… CVSS 2.0MEDIUM 5.0
  • TI-2002-02066 Firewalls from multiple vendors empty state tables more slowly than they are filled… CVSS 2.0MEDIUM 5.0
  • TI-2002-00864 The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and… CVSS 2.0MEDIUM 5.0
  • TI-2008-05790 Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10… CVSS 2.0MEDIUM 4.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences