« Volver al listado

CVE-2018-0011

Estado: ModificadaMedia (5.4)—

A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos Space

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-0011",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos Space",
          "versions": [
            {
              "status": "affected",
              "version": "All",
              "lessThan": "17.2R1",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-01-10T22:29:01.320",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1040189",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10838",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securitytracker.com/id/1040189",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10838",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad Cross-Site Scripting (XSS) reflejado en Junos Space podría permite que un usuario autenticado remoto inyecte script web o HTML, robe datos sensibles y credenciales de una sesión y realice acciones administrativas en el dispositivo de gestión de redes de Junos Space."
    }
  ],
  "lastModified": "2026-06-17T01:29:22.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B610137-66AC-43D3-BBAE-4390011C20AC"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D81E5484-5C0D-44CB-90A8-65EE4E7D4F92"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A53A9542-72FD-40E8-94F1-C7C0D776D726"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00FCCF10-B612-46FC-94E6-70082F2E1091"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5F85CA0-36F3-48EE-8D35-A986412C91D9"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61813043-BAED-4803-9D5B-7B7E113D2FBD"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A3698B1-CC10-40D0-872C-417263C7A949"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5A79F3A-80B9-4D98-92EE-681ED2E716B8"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD833CE8-F37B-4EEB-9DD3-E8A8BB121390"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1107BD8-2F96-4788-A478-C0D7B9D22688"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "139FA36E-582D-41E9-AC4F-9BD49C844039"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC8CBF0A-310F-41EB-B377-F08FE03E3867"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62BB74B8-C90B-4CA1-B8CE-29F8D42D4B46"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44855E13-5493-4362-B7E8-5A1A6F299FFC"
            },
            {
              "criteria": "cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "430F2EBF-09EB-4F48-ACF8-8B4EDF83E284"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}