CoreCVE
Back

MEDIUM

Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu

Published Jan 15, 2019

Description

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

Remediation

Vendor solution

The following software release have been updated to resolve this specific issue: 5.0.3 and all subsequent releases.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner juniper
Published Jan 15, 2019
Updated Sep 16, 2024
Reserved Oct 11, 2018
Link CVE-2019-0018
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-0018
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-0018