CVE-2014-2711 — Cross-site Scripting in Juniper Junos

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 36.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper JunosJuniper J-webJuniper Junos OS
Timeline
PublishedApr 14
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, and 13.3 before 13.3R1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDjuniper/junos11 versions+10
▶juniperjuniper/j-web

🔴Vulnerability Details

1
GHSA
GHSA-pr5p-4v5w-rpqw: Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11↗2022-05-17
▶

📋Vendor Advisories

1
Juniper
CVE-2014-2711: Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before↗2014-04-14
▶