Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS

Summary

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. A specific invocation of the emit_debug_note method in webauth_operation.php will echo back the data it receives. This issue affects Juniper Networks Junos OS on SRX Series and EX Series: • All versions earlier than 20.4R3-S10; • 21.2 versions earlier than 21.2R3-S8; • 21.4 versions earlier than 21.4R3-S6; • 22.1 versions earlier than 22.1R3-S5; • 22.2 versions earlier than 22.2R3-S3; • 22.3 versions earlier than 22.3R3-S2; • 22.4 versions earlier than 22.4R3-S1; • 23.2 versions earlier than 23.2R2; • 23.4 versions earlier than 23.4R2.

Timeline

1. Jan 25, 2024, 10:50 PM UTCCVE published
2. May 8, 2025, 3:46 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. May 29, 2025, 3:18 PM UTCRecord last updated

Affected versions

• Juniper Networks Junos OS

  fixed in 20.4R3-S10; From 21.2 · fixed in 21.2R3-S8; From 21.4 · fixed in 21.4R3-S6; From 22.1 · fixed in 22.1R3-S5; From 22.2 · fixed in 22.2R3-S3; From 22.3 · fixed in 22.3R3-S2; From 22.4 · fixed in 22.4R3-S1; From 23.2 · fixed in 23.2R2; From 23.4 · fixed in 23.4R2

References 1