← Back

CVE-2015-3004

nvd nist
Published: Apr 10, 2015Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D10, 12.3X48 before 12.3X48-D10, 12.2 before 12.2R9, 12.3 before 12.3R7, 13.2 before 13.2R6, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R5, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, and 14.2 before 14.2R1 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.

Affected (48)

Products: Juniper: Junos
1 product
Junos
Configuration A
48 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.1x44
Version 12.1x44 d10
Version 12.1x44 d15
Version 12.1x44 d20
Version 12.1x44 d25
Version 12.1x44 d30
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x47
Version 12.2
Version 12.2 r1
Version 12.2 r2
Version 12.2 r3
Version 12.2 r4
Version 12.2 r5
Version 12.2 r6
Version 12.2 r7
Version 12.2 r8-s2
Version 12.2 r8
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3x48
Version 13.2
Version 13.2 r1
Version 13.2 r2
Version 13.2 r3
Version 13.2 r4
Version 13.2 r5
Version 13.2x51
Version 13.2x51 d10
Version 13.2x51 d15
Version 13.3
Version 13.3 r1
Version 13.3 r2-s2
Version 13.3 r2
Version 13.3 r3
Version 13.3 r4
Version 14.1
Version 14.1 r1
Version 14.1 r2
Version 14.1x53
Version 14.2

References (6)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.