CVE-2019-0026

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration

Medium · published January 15, 2019

CVSS v3.0
5.4
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2019-01-15T21:00Z
EPSS history
Timeline
  • 15 JAN 21:00Z
    Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration
    cvelistv5