Contrail (Juniper) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2017-10-13. Vendor: Juniper.

CVEs of Contrail

• CVE-2017-10617 - CVSS 5 (medium), 2017-10-13: The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system…
• CVE-2017-10616 - CVSS 5.3 (medium), 2017-10-13: The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to…