CVE-2014-2712
Published Apr 14, 2014
Last updated 9 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to index.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8FFDD73-F4A7-42BC-8CEF-4E7CC469CF28"
},
{
"criteria": "cpe:2.3:o:juniper:junos:10.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45C2DA1E-12A7-4018-92CE-7621FC278025"
},
{
"criteria": "cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41543223-0FA9-4CBE-8DEC-717CE5FFED79"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B40B8FD6-A597-4845-8E8E-63EFDF606006"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B307477-C5F2-4D98-AF4C-640D326164C7"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E747970-4C27-4B46-9163-964252CB98F6"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB89F64-16BB-4A14-9084-B338668D7FF1"
},
{
"criteria": "cpe:2.3:o:juniper:junos:12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FB9541A-2570-459A-87D6-5341C67B8EC8"
}
],
"operator": "OR"
}
]
}
]