J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
EUVD-2016-2360 | J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS). |
Fixes
Solution
No solution given by the vendor.
Workaround
Disable J-Web, or limit access to only trusted hosts which may not be compromised by cross-site attacks. For example, deploy jump hosts with no Internet access that use anti-scripting techniques to mitigate potential threats. Alternately, use a dedicated client and dedicated Web browser that is not used to access other sites.
References
Link | Providers |
---|---|
https://kb.juniper.net/JSA10723 |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: juniper
Published:
Updated: 2024-09-16T23:22:09.228Z
Reserved: 2015-12-30T00:00:00
Link: CVE-2016-1261

No data.

Status : Deferred
Published: 2017-10-13T17:29:00.190
Modified: 2025-04-20T01:37:25.860
Link: CVE-2016-1261

No data.

No data.