Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Juniper Networks Junos OS, Junos OS 15.1X53-D238, 15.1X53-D592 Clear all filters
TI-2020-01563 CVE-2020-1607 · GHSA-hfvf-x5qf-mwmg

Junos OS: Cross-Site Scripting (XSS) in J-Web

Priority LOW 35

Insufficient Cross-Site Scripting (XSS) protection in J-Web may potentially allow a remote attacker to inject web script or HTML, hijack the target user's J-Web session and perform administrative actions on the Junos dev…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00881 Published 2020-01-15 Fixed in 12.3R12-S15, 15.1F6-S13 +29 CWE-79
TI-2020-01562 CVE-2020-1606 · GHSA-cvvm-qm6p-fg85

Junos OS: Path traversal vulnerability in J-Web

Priority LOW 37

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00931 Published 2020-01-15 Fixed in 12.3R12-S13, 14.1X53-D51 +23 CWE-22