An XPath Injection vulnerability due to Improper Input Validation in the J-Web component of Juniper Networks Junos OS allows an authenticated malicious user to add an XPath command to the XPath stream, which may allow chaining to other unspecified vulnerabilities, leading to a partial loss of confidentiality. This issue affects Juniper Networks Junos OS: all versions before 19.1R3-S9; 19.2 versions before 19.2R3-S6; 19.3 versions before 19.3R3-S7; 19.4 versions before 19.4R2-S7, 19.4R3-S8; 20.1 versions before 20.1R3-S5; 20.2 versions before 20.2R3-S5; 20.3 versions before 20.3R3-S5; 20.4 versions before 20.4R3-S4; 21.1 versions before 21.1R3-S2; 21.2 versions before 21.2R3-S1; 21.3 versions before 21.3R2-S2, 21.3R3; 21.4 versions before 21.4R1-S2, 21.4R2-S1, 21.4R3; 22.1 versions before 22.1R1-S1, 22.1R2.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
juniper junos 19.1 |
||
juniper junos 19.2 |
||
juniper junos 19.3 |
||
juniper junos 19.4 |
||
juniper junos 20.1 |
||
juniper junos |
||
juniper junos 20.2 |
||
juniper junos 20.3 |
||
juniper junos 20.4 |
||
juniper junos 21.1 |
||
juniper junos 21.2 |
||
juniper junos 21.3 |
||
juniper junos 21.4 |
||
juniper junos 22.1 |
Vulmon