Read the docs
TI-2019-00027 Aliases CVE-2019-0027GHSA-682v-4g9w-9pvp

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration

Priority LOW 25CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Why it matters now

EPSS 0.00624 50th percentileScored 2026-11-07
Fix Fixed Juniper ATP (Juniper Networks): 5.0.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperJuniper ATP5 to before 5.0.35.0.3Patch availableCNA
  • Juniper ATP VendorJuniper Affected 5 to before 5.0.3 Fixed in 5.0.3 Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:*5.0.0 to before 5.0.3VulnerableJuniper
cpe:2.3:h:juniper:atp400:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
cpe:2.3:h:juniper:atp700:-:*:*:*:*:*:*:*not specified by NVDRunning onJuniper
  • cpe:2.3:o:juniper:advanced_threat_prevention:*:*:*:*:*:*:*:* Versions 5.0.0 to before 5.0.3 Vulnerable ·Juniper
  • cpe:2.3:h:juniper:atp400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
  • cpe:2.3:h:juniper:atp700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper

Remediation

  • Fix · CNA Juniper ATP (Juniper Networks) Fixed in 5.0.3

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Juniper ATP 5.0.3

    11 records Highest priority Priority MEDIUM 2 MEDIUM, 9 LOW

    Other records, highest priority first

    • TI-2019-00020 Juniper ATP: Hard coded credentials used in Web CollectorPriority MEDIUM 46
    • TI-2019-00022 Hard-coded credentials in Juniper ATPPriority MEDIUM 45
    • TI-2019-00029 Juniper ATP: Splunk credentials are in logged in clear textPriority LOW 38
    Show all 11 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-0027
  2. 2026-10-03 Alias added: GHSA-682v-4g9w-9pvp
  3. 2026-11-03 EPSS moved to the 50th–90th percentile

References

Patch 1

  • TI-2019-00020 Juniper ATP: Hard coded credentials used in Web Collector CVSS 3.0CRITICAL 10.0
  • TI-2019-00022 Hard-coded credentials in Juniper ATP CVSS 3.0CRITICAL 10.0
  • TI-2019-00029 Juniper ATP: Splunk credentials are in logged in clear text CVSS 3.0HIGH 8.8
  • TI-2019-00021 Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text CVSS 3.0HIGH 7.1
  • TI-2019-00026 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration CVSS 3.0MEDIUM 5.4
  • TI-2019-00025 Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu CVSS 3.0MEDIUM 5.4
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences