CVE-2018-0011

Published: Jan 10, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.

Affected (15)

Products: Juniper: Junos Space

Juniper

1 product

Junos Space

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos Space	Version 13.3 r1
Juniper Junos Space	Version 13.3 r2
Juniper Junos Space	Version 13.3 r4
Juniper Junos Space	Version 14.1 r1
Juniper Junos Space	Version 14.1 r2
Juniper Junos Space	Version 14.1 r3
Juniper Junos Space	Version 15.1 r1
Juniper Junos Space	Version 15.1 r2
Juniper Junos Space	Version 15.1 r3
Juniper Junos Space	Version 15.2 r1
Juniper Junos Space	Version 15.2 r2
Juniper Junos Space	Version 16.1 r1
Juniper Junos Space	Version 16.1 r2
Juniper Junos Space	Version 16.1 r3
Juniper Junos Space	Version 17.1 r1