NVD

Id
31068  
Name
CVE-2014-2712  
Description
Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-14  
Modified Date
2015-10-08  
Seq
2014-2712  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163221 31068 CVE-2014-2712 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10521  View
163222 31068 CVE-2014-2712 66767  View
163223 31068 CVE-2014-2712 1030058  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13144 JVNDB-2014-002019 Juniper Junos の J-Web におけるクロスサイトスクリプティングの脆弱性 Juniper Junos の J-Web には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2712 69999 CVE-2014-2712 31068 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002019.html 2014-04-09 2014-04-16 View