Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2018-0047

Junos Space Security Director: XSS vulnerability in web administration

Description

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security Director web interface. This issue affects all versions of Juniper Networks Junos Space Security Director prior to 17.2R2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos Space Security Director

  • unspecified to ≤ 17.2R2affected

References