Lucene search
HistoryOct 09, 2019 - 8:15 p.m.
CVE-2019-0047
xss
cross-site scripting
junos os
j-web
juniper networks
vulnerability
cve-2019-0047
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue affects: Juniper Networks Junos OS 12.1X46 versions prior to 12.1X46-D86; 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D497, 15.1X53-D69; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R1-S7, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.3 versions prior to 18.3R1-S3, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.
Affected configurations
Node
juniperjunosMatch12.1x46-
ORjuniperjunosMatch12.1x46d10
ORjuniperjunosMatch12.1x46d15
ORjuniperjunosMatch12.1x46d20
ORjuniperjunosMatch12.1x46d25
ORjuniperjunosMatch12.1x46d30
ORjuniperjunosMatch12.1x46d35
ORjuniperjunosMatch12.1x46d40
ORjuniperjunosMatch12.1x46d45
ORjuniperjunosMatch12.1x46d50
ORjuniperjunosMatch12.1x46d55
ORjuniperjunosMatch12.1x46d73
Node
juniperjunosMatch12.3-
ORjuniperjunosMatch12.3r1
ORjuniperjunosMatch12.3r11
ORjuniperjunosMatch12.3r12
ORjuniperjunosMatch12.3r2
ORjuniperjunosMatch12.3r3
ORjuniperjunosMatch12.3r4
ORjuniperjunosMatch12.3r5
ORjuniperjunosMatch12.3r6
ORjuniperjunosMatch12.3r7
ORjuniperjunosMatch12.3r8
ORjuniperjunosMatch12.3r9
Node
juniperjunosMatch12.3x48-
ORjuniperjunosMatch12.3x48d10
ORjuniperjunosMatch12.3x48d15
ORjuniperjunosMatch12.3x48d25
ORjuniperjunosMatch12.3x48d30
ORjuniperjunosMatch12.3x48d35
ORjuniperjunosMatch12.3x48d40
ORjuniperjunosMatch12.3x48d45
ORjuniperjunosMatch12.3x48d50
ORjuniperjunosMatch12.3x48d55
ORjuniperjunosMatch12.3x48d60
ORjuniperjunosMatch12.3x48d65
ORjuniperjunosMatch12.3x48d70
ORjuniperjunosMatch12.3x48d75
Node
juniperjunosMatch14.1x53-
ORjuniperjunosMatch14.1x53d10
ORjuniperjunosMatch14.1x53d15
ORjuniperjunosMatch14.1x53d16
ORjuniperjunosMatch14.1x53d25
ORjuniperjunosMatch14.1x53d26
ORjuniperjunosMatch14.1x53d27
ORjuniperjunosMatch14.1x53d30
ORjuniperjunosMatch14.1x53d35
ORjuniperjunosMatch14.1x53d40
ORjuniperjunosMatch14.1x53d45
ORjuniperjunosMatch14.1x53d47
ORjuniperjunosMatch14.1x53d48
ORjuniperjunosMatch14.1x53d49
Node
juniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
Node
juniperjunosMatch15.1x49d10
ORjuniperjunosMatch15.1x49d100
ORjuniperjunosMatch15.1x49d110
ORjuniperjunosMatch15.1x49d120
ORjuniperjunosMatch15.1x49d130
ORjuniperjunosMatch15.1x49d140
ORjuniperjunosMatch15.1x49d150
ORjuniperjunosMatch15.1x49d160
ORjuniperjunosMatch15.1x49d170
ORjuniperjunosMatch15.1x49d20
ORjuniperjunosMatch15.1x49d30
ORjuniperjunosMatch15.1x49d35
ORjuniperjunosMatch15.1x49d40
ORjuniperjunosMatch15.1x49d45
ORjuniperjunosMatch15.1x49d50
ORjuniperjunosMatch15.1x49d55
ORjuniperjunosMatch15.1x49d60
ORjuniperjunosMatch15.1x49d65
ORjuniperjunosMatch15.1x49d70
ORjuniperjunosMatch15.1x49d75
ORjuniperjunosMatch15.1x49d80
ORjuniperjunosMatch15.1x49d90
Node
juniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d470
ORjuniperjunosMatch15.1x53d495
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d70
Node
juniperjunosMatch16.1-
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s4
Node
juniperjunosMatch16.2-
ORjuniperjunosMatch16.2r1
ORjuniperjunosMatch16.2r2
ORjuniperjunosMatch16.2r2-s1
ORjuniperjunosMatch16.2r2-s2
ORjuniperjunosMatch16.2r2-s5
ORjuniperjunosMatch16.2r2-s6
ORjuniperjunosMatch16.2r2-s7
ORjuniperjunosMatch16.2r2-s8
Node
juniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r2-s6
Node
juniperjunosMatch17.1-
ORjuniperjunosMatch17.1r1
ORjuniperjunosMatch17.1r2-s1
ORjuniperjunosMatch17.1r2-s10
ORjuniperjunosMatch17.1r2-s2
ORjuniperjunosMatch17.1r2-s3
ORjuniperjunosMatch17.1r2-s4
ORjuniperjunosMatch17.1r2-s5
ORjuniperjunosMatch17.1r2-s6
ORjuniperjunosMatch17.1r2-s7
Node
juniperjunosMatch17.3-
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
Node
juniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s3
Node
juniperjunosMatch18.1-
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
Node
juniperjunosMatch18.2-
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
Node
juniperjunosMatch18.3-
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
Node
juniperjunosMatch18.4-
ORjuniperjunosMatch18.4r1
| CPE | Name | Operator | Version |
|---|---|---|---|
| juniper:junos | juniper junos | eq | 12.1x46 |
CNA Affected
[
{
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "12.1X46-D86",
"status": "affected",
"version": "12.1X46",
"versionType": "custom"
},
{
"lessThan": "12.3R12-S13",
"status": "affected",
"version": "12.3",
"versionType": "custom"
},
{
"lessThan": "12.3X48-D80",
"status": "affected",
"version": "12.3X48",
"versionType": "custom"
},
{
"lessThan": "14.1X53-D51",
"status": "affected",
"version": "14.1X53",
"versionType": "custom"
},
{
"lessThan": "15.1F6-S13, 15.1R7-S4",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "15.1X49-D171, 15.1X49-D180",
"status": "affected",
"version": "15.1X49",
"versionType": "custom"
},
{
"lessThan": "15.1X53-D497, 15.1X53-D69",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
},
{
"lessThan": "16.1R7-S5",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "16.2R2-S9",
"status": "affected",
"version": "16.2",
"versionType": "custom"
},
{
"lessThan": "17.1R3",
"status": "affected",
"version": "17.1",
"versionType": "custom"
},
{
"lessThan": "17.2R1-S8, 17.2R2-S7, 17.2R3-S1",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.3R3-S6",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R1-S7, 17.4R2-S4, 17.4R3",
"status": "affected",
"version": "17.4",
"versionType": "custom"
},
{
"lessThan": "18.1R3-S5",
"status": "affected",
"version": "18.1",
"versionType": "custom"
},
{
"lessThan": "18.2R1-S5, 18.2R2-S3, 18.2R3",
"status": "affected",
"version": "18.2",
"versionType": "custom"
},
{
"lessThan": "18.3R1-S3, 18.3R2, 18.3R3",
"status": "affected",
"version": "18.3",
"versionType": "custom"
},
{
"lessThan": "18.4R1-S2, 18.4R2",
"status": "affected",
"version": "18.4",
"versionType": "custom"
}
]
}
]References
Related
symantec
symantec
Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability
2019-10-09 00:00:00
cvelist
cvelist
CVE-2019-0047 Junos OS: Persistent XSS vulnerability in J-Web
2019-10-09 00:00:00
nvd
nvd
CVE-2019-0047
2019-10-09 20:15:16
prion
prion
Cross site scripting
2019-10-09 20:15:00
nessus
nessus
Juniper JSA10970
2020-01-29 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.6 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
Related for CVE-2019-0047