Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Juniper Networks Junos OS — supportportal.juniper.net/JSA76390 Clear all filters
TI-2024-14346 CVE-2024-21620 · GHSA-mph2-x4gq-qj7g

Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS

Priority MEDIUM 42

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an attacker to construct a URL that when visi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00908 Published 2024-01-25 Fixed in 20.4R3-S10, 21.2R3-S8 +7 CWE-79
TI-2024-14345 CVE-2024-21619 · GHSA-xvh3-qgp6-m4r6

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Priority LOW 35

A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series al…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00882 Published 2024-01-25 Fixed in 20.4R3-S9, 21.2R3-S7 +8 CWE-209