{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-10T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1016462", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016462"}, {"name": "ADV-2006-2741", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2741"}, {"name": "1218", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1218"}, {"name": "20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/439758/100/0/threaded"}, {"name": "18926", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18926"}, {"name": "27131", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/27131"}, {"name": "juniper-networks-logging-xss(27645)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645"}, {"name": "20990", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20990"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3567", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1016462", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016462"}, {"name": "ADV-2006-2741", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2741"}, {"name": "1218", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1218"}, {"name": "20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/439758/100/0/threaded"}, {"name": "18926", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18926"}, {"name": "27131", "refsource": "OSVDB", "url": "http://www.osvdb.org/27131"}, {"name": "juniper-networks-logging-xss(27645)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645"}, {"name": "20990", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20990"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:30:34.489Z"}, "title": "CVE Program Container", "references": [{"name": "1016462", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016462"}, {"name": "ADV-2006-2741", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2741"}, {"name": "1218", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1218"}, {"name": "20060710 Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/439758/100/0/threaded"}, {"name": "18926", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18926"}, {"name": "27131", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/27131"}, {"name": "juniper-networks-logging-xss(27645)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645"}, {"name": "20990", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20990"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3567", "datePublished": "2006-07-13T01:00:00", "dateReserved": "2006-07-12T00:00:00", "dateUpdated": "2024-08-07T18:30:34.489Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:dx:*:*:*:*:*:*:*:*", "matchCriteriaId": "12AA1011-1EBA-447E-992D-F1A8610AB47C", "versionEndIncluding": "5.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redline) DX 5.1.x, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the username login field."}, {"lang": "es", "value": "Vulnerabilidad de secuencia de comando en sitios cruzados (XSS) en la interfaz de entrada de administraci\u00f3n web en Juniper Networks (Redline) DX 5.1.x, permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del campo de entrada username."}], "id": "CVE-2006-3567", "lastModified": "2018-10-18T16:48:00.923", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-07-13T01:05:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20990"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1218"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016462"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/27131"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/439758/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18926"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/2741"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27645"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}