VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Oct 10, 2018· Updated Jun 17, 2026

CVE-2018-0059

CVE-2018-0059

Description

A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. Affected releases are Juniper Networks ScreenOS 6.3.0 versions prior to 6.3.0r26.

Affected products

29
  • Juniper Networks/Screenos29 versions
    cpe:2.3:o:juniper:netscreen_screenos:6.3.0:*:*:*:*:*:*:*+ 28 more
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r10:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r11:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r12:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r13:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r14:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r15:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r16:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r17:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r18:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r19:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r1:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r21:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r22:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r23b1:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r24b1:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r25:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r2:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r3:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r4:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r5:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r6:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r7:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r8:*:*:*:*:*:*:*
    • cpe:2.3:o:juniper:netscreen_screenos:6.3.0r9:*:*:*:*:*:*:*
    • (no CPE)range: <6.3.0r26
    • (no CPE)range: 6.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.