Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Juniper Component: Advanced Threat Prevention Clear all filters
TI-2019-00027 CVE-2019-0027 · GHSA-682v-4g9w-9pvp

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administra…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00026 CVE-2019-0026 · GHSA-r9jm-59xm-qf6g

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration se…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0063 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00025 CVE-2019-0025 · GHSA-xf39-pfrw-q9g7

Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00024 CVE-2019-0024 · GHSA-h3qq-r4hm-3rxm

Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00023 CVE-2019-0023 · GHSA-5gxc-qhvh-x4f3

Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration sessio…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00022 CVE-2019-0022 · GHSA-4c33-jjxv-7pfw

Hard-coded credentials in Juniper ATP

Priority MEDIUM 45

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01129 Published 2019-01-15 Fixed in 5.0.3 CWE-798
TI-2019-00021 CVE-2019-0021 · GHSA-6cqx-g9mw-4p5m

Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text

Priority LOW 31

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00336 Published 2019-01-15 Fixed in 5.0.4 CWE-532
TI-2019-00020 CVE-2019-0020 · GHSA-426w-g76x-326w

Juniper ATP: Hard coded credentials used in Web Collector

Priority MEDIUM 46

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01569 Published 2019-01-15 Fixed in 5.0.3 CWE-798
TI-2019-00018 CVE-2019-0018 · GHSA-64q2-7r9m-7p7x

Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-01-15 Fixed in 5.0.3 CWE-79