Juniper Networks Juniper ATP
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0030 | 5.0 – < 5.0.3 | Juniper ATP: Password hashing uses DES and a hardcoded salt | HIGH 7.2 | 0.5 % | ||
| CVE-2019-0029 | 5.0 – < 5.0.3 | Juniper ATP: Splunk credentials are in logged in clear text | HIGH 8.8 | 0.3 % | ||
| CVE-2019-0027 | 5 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-0026 | 5 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-0025 | 5 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-0024 | 5.0 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-0023 | 5.0 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu | MEDIUM 5.4 | 0.5 % | ||
| CVE-2019-0022 | 5.0 – < 5.0.3 | Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the… | CRITICAL 10.0 | 1.1 % | ||
| CVE-2019-0021 | 5.0 – < 5.0.4 | Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text | HIGH 7.1 | 0.3 % | ||
| CVE-2019-0020 | 5.0 – < 5.0.3 | Juniper ATP: Hard coded credentials used in Web Collector | CRITICAL 10.0 | 1.6 % | ||
| CVE-2019-0018 | 5 – < 5.0.3 | Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu | MEDIUM 5.4 | 0.5 % | ||
| CVE-2019-0004 | 5.0 – < 5.0.3 | Juniper ATP: API and device keys are logged in a world-readable permissions file | HIGH 7.8 | 0.3 % |