Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2018-0011
Modified
More InfoOfficial Page
Source-sirt@juniper.net
View Known Exploited Vulnerability (KEV) details
Published At-10 Jan, 2018 | 22:29
Updated At-09 Oct, 2019 | 23:30

A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.05.4MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Secondary3.05.4MEDIUM
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary2.03.5LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
CPE Matches

Juniper Networks, Inc.
juniper
>>junos_space>>13.3
cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>13.3
cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>13.3
cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>14.1
cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>14.1
cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>14.1
cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>15.1
cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>15.1
cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>15.1
cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>15.2
cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>15.2
cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>16.1
cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>16.1
cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>16.1
cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*
Juniper Networks, Inc.
juniper
>>junos_space>>17.1
cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
http://www.securitytracker.com/id/1040189sirt@juniper.net
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10838sirt@juniper.net
Patch
Vendor Advisory
Change History
0Changes found

Details not found