Priority LOW 25
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by c…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2017-04-24 · No fix listed CWE-400
Priority LOW 35
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack, thereby ste…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.00973 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 31
A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough syste…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01075 · Published 2017-04-24 · No fix listed CWE-400
Priority MEDIUM 42
An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0226 · Published 2017-04-24 · No fix listed CWE-287
Priority LOW 34
A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to bypass firewall policies, leading to authenticati…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.01065 · Published 2017-04-24 · No fix listed
Priority LOW 28
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbi…
CVSS 3.0MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00317 · Published 2017-04-24 · No fix listed CWE-834
Priority LOW 28
An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivile…
CVSS 3.0MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00363 · Published 2017-04-24 · No fix listed CWE-287
Priority LOW 25
An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to elevate their permissions through reading unp…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00323 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 25
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to consume large amounts of system resources leading…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00298 · Published 2017-04-24 · No fix listed CWE-400
Priority LOW 31
An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underly…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0114 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 31
A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of servi…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01163 · Published 2017-04-24 · No fix listed CWE-119
Priority LOW 28
A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01906 · Published 2017-04-24 · No fix listed CWE-77
Priority LOW 35
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker crafting packets destined to the device to cause a persistent de…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01296 · Published 2017-04-24 · No fix listed
Priority MEDIUM 40
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various system services partial to fu…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.01451 · Published 2017-04-24 · No fix listed
Priority MEDIUM 47
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause various denials of services leading t…
CVSS 3.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01856 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 38
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, lea…
CVSS 3.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.01067 · Published 2017-04-24 · No fix listed CWE-287
Priority LOW 31
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00988 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 39
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services…
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.0095 · Published 2017-04-24 · No fix listed CWE-200
Priority LOW 29
A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of servi…
CVSS 3.0MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2017-04-24 · No fix listed CWE-119