| ID |
CVE-2006-3567
|
| Summary |
Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 4.3 (as of 18-10-2018 - 16:48) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
| refmap
via4
|
| bid | 18926 | | bugtraq | 20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability | | osvdb | 27131 | | sectrack | 1016462 | | secunia | 20990 | | sreason | 1218 | | vupen | ADV-2006-2741 | | xf | juniper-networks-logging-xss(27645) |
|
| Last major update |
18-10-2018 - 16:48 |
| Published |
13-07-2006 - 01:05 |
| Last modified |
18-10-2018 - 16:48 |
