CVE-2014-3821

Published: Jul 11, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in SRX Web Authentication (webauth) in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (5)

Products: Juniper: Junos

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 11.4
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x47

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

http://www.securityfocus.com/bid/68548

Source: cve@mitre.org

http://www.securitytracker.com/id/1030563

Source: cve@mitre.org

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10640

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/68548

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030563

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10640

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.