CVE-2016-1261

Published: Oct 13, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).

Affected (74)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

74 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x44 d10
Juniper Junos	Version 12.1x44 d15
Juniper Junos	Version 12.1x44 d20
Juniper Junos	Version 12.1x44 d25
Juniper Junos	Version 12.1x44 d30
Juniper Junos	Version 12.1x44 d35
Juniper Junos	Version 12.1x44 d40
Juniper Junos	Version 12.1x44 d45
Juniper Junos	Version 12.1x44 d50
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25
Juniper Junos	Version 12.1x46 d30
Juniper Junos	Version 12.1x46 d35
Juniper Junos	Version 12.1x46 d40
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15
Juniper Junos	Version 12.1x47 d20
Juniper Junos	Version 12.1x47 d25
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3 r2
Juniper Junos	Version 12.3 r3
Juniper Junos	Version 12.3 r4
Juniper Junos	Version 12.3 r5
Juniper Junos	Version 12.3 r6
Juniper Junos	Version 12.3 r7
Juniper Junos	Version 12.3 r8
Juniper Junos	Version 12.3 r9
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 12.3x48 d25
Juniper Junos	Version 13.2x51
Juniper Junos	Version 13.2x51 d15
Juniper Junos	Version 13.2x51 d20
Juniper Junos	Version 13.2x51 d21
Juniper Junos	Version 13.2x51 d25
Juniper Junos	Version 13.2x51 d26
Juniper Junos	Version 13.2x51 d30
Juniper Junos	Version 13.2x51 d35
Juniper Junos	Version 13.3
Juniper Junos	Version 13.3 r1
Juniper Junos	Version 13.3 r2-s2
Juniper Junos	Version 13.3 r2
Juniper Junos	Version 13.3 r3
Juniper Junos	Version 13.3 r4
Juniper Junos	Version 13.3 r5
Juniper Junos	Version 13.3 r6
Juniper Junos	Version 13.3 r7
Juniper Junos	Version 14.1
Juniper Junos	Version 14.1 r1
Juniper Junos	Version 14.1 r2
Juniper Junos	Version 14.1 r3
Juniper Junos	Version 14.1 r4
Juniper Junos	Version 14.1 r5
Juniper Junos	Version 14.1x53
Juniper Junos	Version 14.1x53 d10
Juniper Junos	Version 14.1x53 d15
Juniper Junos	Version 14.1x53 d16
Juniper Junos	Version 14.1x53 d25
Juniper Junos	Version 14.1x53 d26
Juniper Junos	Version 14.1x53 d27
Juniper Junos	Version 14.2
Juniper Junos	Version 14.2 r1
Juniper Junos	Version 14.2 r2
Juniper Junos	Version 14.2 r3
Juniper Junos	Version 14.2 r4
Juniper Junos	Version 15.1 r1
Juniper Junos	Version 15.1 r2
Juniper Junos	Version 15.1x49 d10

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://kb.juniper.net/JSA10723

Source: sirt@juniper.net

Vendor Advisory

https://kb.juniper.net/JSA10723

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.