Advanced Threat Prevention (Juniper) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2019-01-15. Vendor: Juniper.
CVEs of Advanced Threat Prevention
- CVE-2019-0020 - CVSS 10 (critical), 2019-01-15: Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of…
- CVE-2019-0023 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal…
- CVE-2019-0026 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and…
- CVE-2019-0018 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and…
- CVE-2019-0022 - CVSS 10 (critical), 2019-01-15: Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the…
- CVE-2019-0025 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and…
- CVE-2019-0029 - CVSS 8.8 (high), 2019-01-15: Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk…
- CVE-2019-0021 - CVSS 7.1 (high), 2019-01-15: On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to…
- CVE-2019-0024 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and…
- CVE-2019-0027 - CVSS 5.4 (medium), 2019-01-15: A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script…
- CVE-2019-0004 - CVSS 7.8 (high), 2019-01-15: On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical…
