2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Junos Space","vendor":"Juniper Networks","versions":[{"lessThan":"17.2R1","status":"affected","version":"All","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"7B610137-66AC-43D3-BBAE-4390011C20AC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*","matchCriteriaId":"D81E5484-5C0D-44CB-90A8-65EE4E7D4F92","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*","matchCriteriaId":"A53A9542-72FD-40E8-94F1-C7C0D776D726","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*","matchCriteriaId":"00FCCF10-B612-46FC-94E6-70082F2E1091","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*","matchCriteriaId":"E5F85CA0-36F3-48EE-8D35-A986412C91D9","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*","matchCriteriaId":"61813043-BAED-4803-9D5B-7B7E113D2FBD","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*","matchCriteriaId":"7A3698B1-CC10-40D0-872C-417263C7A949","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*","matchCriteriaId":"B5A79F3A-80B9-4D98-92EE-681ED2E716B8","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*","matchCriteriaId":"FD833CE8-F37B-4EEB-9DD3-E8A8BB121390","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*","matchCriteriaId":"B1107BD8-2F96-4788-A478-C0D7B9D22688","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*","matchCriteriaId":"139FA36E-582D-41E9-AC4F-9BD49C844039","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*","matchCriteriaId":"FC8CBF0A-310F-41EB-B377-F08FE03E3867","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*","matchCriteriaId":"62BB74B8-C90B-4CA1-B8CE-29F8D42D4B46","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*","matchCriteriaId":"44855E13-5493-4362-B7E8-5A1A6F299FFC","vulnerable":true},{"criteria":"cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*","matchCriteriaId":"430F2EBF-09EB-4F48-ACF8-8B4EDF83E284","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device."},{"lang":"es","value":"Una vulnerabilidad Cross-Site Scripting (XSS) reflejado en Junos Space podría permite que un usuario autenticado remoto inyecte script web o HTML, robe datos sensibles y credenciales de una sesión y realice acciones administrativas en el dispositivo de gestión de redes de Junos Space."}],"id":"CVE-2018-0011","lastModified":"2026-06-17T01:29:22.973","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"sirt@juniper.net","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-01-10T22:29:01.320","references":[{"source":"sirt@juniper.net","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040189"},{"source":"sirt@juniper.net","tags":["Patch","Vendor Advisory"],"url":"https://kb.juniper.net/JSA10838"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040189"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://kb.juniper.net/JSA10838"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"nvd@nist.gov","type":"Primary"}]}
|