CVE-2006-3567 Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject ar...
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper dx | <= 5.1 | No fix listed |
References
- 20990 third-party-advisory vendor-advisory
- 1218 third-party-advisory
- 1016462 vdb-entry
- 27131 vdb-entry
- 20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability mailing-list
- 18926 vdb-entry
- ADV-2006-2741 vdb-entry
- juniper-networks-logging-xss(27645) vdb-entry