VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 15, 2019· Updated Sep 16, 2024

Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu

CVE-2019-0018

Description

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

2
  • Zyxel/ATPllm-fuzzy
    Range: <5.0.3
  • Juniper Networks/Juniper ATPv5
    Range: 5

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.