CVE-2014-6447

Published: Feb 11, 2020Modified: Nov 21, 2024

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.7

Source: NVD

Description

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, 14.2 before 14.2R1, and 15.1 before 15.1R1.

Affected (49)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x44 d10
Juniper Junos	Version 12.1x44 d15
Juniper Junos	Version 12.1x44 d20
Juniper Junos	Version 12.1x44 d25
Juniper Junos	Version 12.1x44 d30
Juniper Junos	Version 12.1x44 d35
Juniper Junos	Version 12.1x44 d40

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3 r2
Juniper Junos	Version 12.3 r3
Juniper Junos	Version 12.3 r4
Juniper Junos	Version 12.3 r5
Juniper Junos	Version 12.3 r6
Juniper Junos	Version 12.3 r7

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.3x48

Configuration F

6 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 13.1
Juniper Junos	Version 13.1 r1
Juniper Junos	Version 13.1 r2
Juniper Junos	Version 13.1 r3
Juniper Junos	Version 13.1 r4-s2
Juniper Junos	Version 13.1 r4

Configuration G

6 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 13.2
Juniper Junos	Version 13.2 r1
Juniper Junos	Version 13.2 r2
Juniper Junos	Version 13.2 r3
Juniper Junos	Version 13.2 r4
Juniper Junos	Version 13.2 r5

Configuration H

6 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 13.3
Juniper Junos	Version 13.3 r10
Juniper Junos	Version 13.3 r1
Juniper Junos	Version 13.3 r2-s2
Juniper Junos	Version 13.3 r2
Juniper Junos	Version 13.3 r3