Test ID:	1.3.6.1.4.1.25623.1.0.105905
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS J-Web XSS Vulnerability (JSA10521)
Summary:	Juniper Networks Junos OS is prone to a cross-site scripting; (XSS) vulnerability in J-Web.
Description:	Summary: Juniper Networks Junos OS is prone to a cross-site scripting (XSS) vulnerability in J-Web. Vulnerability Insight: J-Web is vulnerable to a cross-site scripting injection. Parameters passed as arguments to index.php can result in the execution of scripting tags within the user's browser. Vulnerability Impact: Remote attackers can inject arbitrary web script or HTML to index.php. Affected Software/OS: Junos OS 10.0, 10.4, 11.4, 12.1 and 12.2. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable J-Web. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2712 BugTraq ID: 66767 http://www.securityfocus.com/bid/66767 http://www.securitytracker.com/id/1030058
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.