Lucene search

[email protected]CVE-2015-3005

HistoryApr 10, 2015 - 3:00 p.m.

CVE-2015-3005

2015-04-1015:00:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2015-3005

cross-site scripting

xss

juniper

junos

security vulnerability

dynamic vpn

nvd

srx series

remote attack

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Cross-site scripting (XSS) vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, and 12.3X48 before 12.3X48-D10 on SRX series devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

juniperjunosMatch12.1x44

juniperjunosMatch12.1x44d10

juniperjunosMatch12.1x44d15

juniperjunosMatch12.1x44d20

juniperjunosMatch12.1x44d25

juniperjunosMatch12.1x44d30

juniperjunosMatch12.1x44d35

juniperjunosMatch12.1x44d40

juniperjunosMatch12.1x46

juniperjunosMatch12.1x46d10

juniperjunosMatch12.1x46d15

juniperjunosMatch12.1x46d20

juniperjunosMatch12.1x46d25

juniperjunosMatch12.1x47

juniperjunosMatch12.1x47d10

juniperjunosMatch12.1x48

AND

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx210Match-

junipersrx220Match-

junipersrx240Match-

junipersrx3400Match-

junipersrx3600Match-

junipersrx550Match-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

CPENameOperatorVersion
juniper:junosjuniper junoseq12.1x44
juniper:junosjuniper junoseq12.1x46
juniper:junosjuniper junoseq12.1x47
juniper:junosjuniper junoseq12.1x48