CVE-2018-0059 ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability
MediumCVSS 5.4
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. Affected releases are Juniper Networks ScreenOS 6.3.0 versions prior to 6.3.0r26.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | = 6.3.0 | No fix listed |
| juniper netscreen screenos | = 6.3.0r1 | No fix listed |
| juniper netscreen screenos | = 6.3.0r2 | No fix listed |
| juniper netscreen screenos | = 6.3.0r3 | No fix listed |
| juniper netscreen screenos | = 6.3.0r4 | No fix listed |
| juniper netscreen screenos | = 6.3.0r5 | No fix listed |
| juniper netscreen screenos | = 6.3.0r6 | No fix listed |
| juniper netscreen screenos | = 6.3.0r7 | No fix listed |
| juniper netscreen screenos | = 6.3.0r8 | No fix listed |
| juniper netscreen screenos | = 6.3.0r9 | No fix listed |
| juniper netscreen screenos | = 6.3.0r10 | No fix listed |
| juniper netscreen screenos | = 6.3.0r11 | No fix listed |
| juniper netscreen screenos | = 6.3.0r12 | No fix listed |
| juniper netscreen screenos | = 6.3.0r13 | No fix listed |
| juniper netscreen screenos | = 6.3.0r14 | No fix listed |
| juniper netscreen screenos | = 6.3.0r15 | No fix listed |
| juniper netscreen screenos | = 6.3.0r16 | No fix listed |
| juniper netscreen screenos | = 6.3.0r17 | No fix listed |
| juniper netscreen screenos | = 6.3.0r18 | No fix listed |
| juniper netscreen screenos | = 6.3.0r19 | No fix listed |
| juniper netscreen screenos | = 6.3.0r21 | No fix listed |
| juniper netscreen screenos | = 6.3.0r22 | No fix listed |
| juniper netscreen screenos | = 6.3.0r23 | No fix listed |
| juniper netscreen screenos | = 6.3.0r23b1 | No fix listed |
| juniper netscreen screenos | = 6.3.0r24 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper netscreen screenos | = 6.3.0r24b1 | No fix listed |
| juniper netscreen screenos | = 6.3.0r25 | No fix listed |
| juniper screenos | >= 6.3.0, < 6.3.0r26 | 6.3.0r26 |
References
- kb.juniper.net vendor-advisory