Vulnerability Details CVE-2018-0046
A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.3
References
- http://www.securityfocus.com/bid/105566
- http://www.securitytracker.com/id/1041862
- https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d
- https://kb.juniper.net/JSA10880
- http://www.securityfocus.com/bid/105566
- http://www.securitytracker.com/id/1041862
- https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d
- https://kb.juniper.net/JSA10880
Products affected by CVE-2018-0046
-
cpe:2.3:a:juniper:junos_space:18.1r1