4.3

CVE-2008-6096

Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the (1) web interface login page or the (2) telnet login page.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
JuniperNetscreen Screenos Version1.6.0
JuniperNetscreen Screenos Version <= 5.4.0r9.0
JuniperNetscreen Screenos Version2.0.0
JuniperNetscreen Screenos Version2.5.0
JuniperNetscreen Screenos Version2.6.0
JuniperNetscreen Screenos Version2.6.1
JuniperNetscreen Screenos Version2.6.1r1
JuniperNetscreen Screenos Version2.6.1r2
JuniperNetscreen Screenos Version2.6.1r3
JuniperNetscreen Screenos Version2.6.1r4
JuniperNetscreen Screenos Version2.6.1r5
JuniperNetscreen Screenos Version2.6.1r6
JuniperNetscreen Screenos Version2.6.1r7
JuniperNetscreen Screenos Version2.6.1r8
JuniperNetscreen Screenos Version2.6.1r9
JuniperNetscreen Screenos Version2.6.1r10
JuniperNetscreen Screenos Version2.6.1r11
JuniperNetscreen Screenos Version2.6.1r12
JuniperNetscreen Screenos Version2.7.0
JuniperNetscreen Screenos Version2.7.1
JuniperNetscreen Screenos Version2.7.1r1
JuniperNetscreen Screenos Version2.7.1r2
JuniperNetscreen Screenos Version2.7.1r3
JuniperNetscreen Screenos Version3.0.0
JuniperNetscreen Screenos Version3.0.0r1
JuniperNetscreen Screenos Version3.0.0r2
JuniperNetscreen Screenos Version3.0.0r3
JuniperNetscreen Screenos Version3.0.0r4
JuniperNetscreen Screenos Version3.0.1
JuniperNetscreen Screenos Version3.0.1r1
JuniperNetscreen Screenos Version3.0.1r2
JuniperNetscreen Screenos Version3.0.1r3
JuniperNetscreen Screenos Version3.0.1r4
JuniperNetscreen Screenos Version3.0.1r5
JuniperNetscreen Screenos Version3.0.1r6
JuniperNetscreen Screenos Version3.0.1r7
JuniperNetscreen Screenos Version3.0.2
JuniperNetscreen Screenos Version3.0.3
JuniperNetscreen Screenos Version3.0.3r1
JuniperNetscreen Screenos Version3.0.3r1.1
JuniperNetscreen Screenos Version3.0.3r2
JuniperNetscreen Screenos Version3.0.3r3
JuniperNetscreen Screenos Version3.0.3r4
JuniperNetscreen Screenos Version3.0.3r5
JuniperNetscreen Screenos Version3.0.3r6
JuniperNetscreen Screenos Version3.0.3r7
JuniperNetscreen Screenos Version3.0.3r8
JuniperNetscreen Screenos Version3.1.0
JuniperNetscreen Screenos Version3.1.0r1
JuniperNetscreen Screenos Version3.1.0r2
JuniperNetscreen Screenos Version3.1.0r3
JuniperNetscreen Screenos Version3.1.0r4
JuniperNetscreen Screenos Version3.1.0r5
JuniperNetscreen Screenos Version3.1.0r6
JuniperNetscreen Screenos Version3.1.0r7
JuniperNetscreen Screenos Version3.1.0r8
JuniperNetscreen Screenos Version3.1.0r9
JuniperNetscreen Screenos Version3.1.0r10
JuniperNetscreen Screenos Version3.1.0r11
JuniperNetscreen Screenos Version3.1.0r12
JuniperNetscreen Screenos Version4.0.0
JuniperNetscreen Screenos Version4.0.0 Editiondial
JuniperNetscreen Screenos Version4.0.0 Editiondial2
JuniperNetscreen Screenos Version4.0.0r1
JuniperNetscreen Screenos Version4.0.0r2
JuniperNetscreen Screenos Version4.0.0r3
JuniperNetscreen Screenos Version4.0.0r4
JuniperNetscreen Screenos Version4.0.0r5
JuniperNetscreen Screenos Version4.0.0r6
JuniperNetscreen Screenos Version4.0.0r7
JuniperNetscreen Screenos Version4.0.0r8
JuniperNetscreen Screenos Version4.0.0r9
JuniperNetscreen Screenos Version4.0.0r10
JuniperNetscreen Screenos Version4.0.0r11
JuniperNetscreen Screenos Version4.0.0r12
JuniperNetscreen Screenos Version4.0.1
JuniperNetscreen Screenos Version4.0.1r1
JuniperNetscreen Screenos Version4.0.1r2
JuniperNetscreen Screenos Version4.0.1r3
JuniperNetscreen Screenos Version4.0.1r4
JuniperNetscreen Screenos Version4.0.1r5
JuniperNetscreen Screenos Version4.0.1r6
JuniperNetscreen Screenos Version4.0.1r7
JuniperNetscreen Screenos Version4.0.1r8
JuniperNetscreen Screenos Version4.0.1r9
JuniperNetscreen Screenos Version4.0.1r10
JuniperNetscreen Screenos Version4.0.2
JuniperNetscreen Screenos Version4.0.3
JuniperNetscreen Screenos Version4.0.3r1
JuniperNetscreen Screenos Version4.0.3r2
JuniperNetscreen Screenos Version4.0.3r3
JuniperNetscreen Screenos Version4.0.3r4
JuniperNetscreen Screenos Version4.0.3r5
JuniperNetscreen Screenos Version4.0.3r6
JuniperNetscreen Screenos Version4.0.3r7
JuniperNetscreen Screenos Version4.0.3r8
JuniperNetscreen Screenos Version4.0.3r9
JuniperNetscreen Screenos Version5.0.0
JuniperNetscreen Screenos Version5.0.0r1
JuniperNetscreen Screenos Version5.0.0r2
JuniperNetscreen Screenos Version5.0.0r3
JuniperNetscreen Screenos Version5.0.0r4
JuniperNetscreen Screenos Version5.0.0r5
JuniperNetscreen Screenos Version5.0.0r6
JuniperNetscreen Screenos Version5.0.0r7
JuniperNetscreen Screenos Version5.0.0r8
JuniperNetscreen Screenos Version5.0.0r9
JuniperNetscreen Screenos Version5.0.0r10
JuniperNetscreen Screenos Version5.0.0r11
JuniperNetscreen Screenos Version5.1.0
JuniperNetscreen Screenos Version5.1.0r1
JuniperNetscreen Screenos Version5.1.0r2
JuniperNetscreen Screenos Version5.1.0r3
JuniperNetscreen Screenos Version5.1.0r4
JuniperNetscreen Screenos Version5.2.0
JuniperNetscreen Screenos Version5.2.0r1
JuniperNetscreen Screenos Version5.2.0r2
JuniperNetscreen Screenos Version5.2.0r3
JuniperNetscreen Screenos Version5.3.0
JuniperNetscreen Screenos Version5.3.0r1
JuniperNetscreen Screenos Version5.3.0r2
JuniperNetscreen Screenos Version5.3.0r3
JuniperNetscreen Screenos Version5.3.0r4
JuniperNetscreen Screenos Version5.3.0r5
JuniperNetscreen Screenos Version5.3.0r6
JuniperNetscreen Screenos Version5.3.0r7
JuniperNetscreen Screenos Version5.3.0r8
JuniperNetscreen Screenos Version5.3.0r9
JuniperNetscreen Screenos Version5.3.0r10
JuniperNetscreen Screenos Version5.4.0
JuniperNetscreen Screenos Version5.4.0r1
JuniperNetscreen Screenos Version5.4.0r2
JuniperNetscreen Screenos Version5.4.0r3
JuniperNetscreen Screenos Version5.4.0r4
JuniperNetscreen Screenos Version5.4.0r5
JuniperNetscreen Screenos Version5.4.0r6
JuniperNetscreen Screenos Version5.4.0r7
JuniperNetscreen Screenos Version5.4.0r8
JuniperNetscreen Screenos Version5.4.0r8a
JuniperNetscreen Screenos Version6.0.0r6
JuniperNetscreen Screenos Version6.1.0r2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.49
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.