CVE-2018-0046

Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS

State: Published
Severity: 8.8 High
Published: Oct 10, 2018
Updated: Sep 17, 2024
Reserved: Nov 16, 2017

Description

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos SpaceJuniper Networks	before 18.2R1Affected

References

105566vdb-entry
https://kb.juniper.net/JSA10880
https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d
1041862vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.