Approved changes feed: RSS · Atom

cpe:2.3:a:juniper_networks:juniper_atp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJuniper Networks (75c1b4ad-b137-51c1-bf9a-3bc90c5e98be)
ProductJuniper Atp (e7a60d33-0ee1-5f70-b8df-3db4a134696d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0030 vulnerable 2026-06-08 05:12:08.853908 Juniper ATP: Password hashing uses DES and a hardcoded salt
MEDIUM (6.7)
Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T17:17:54.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0029 vulnerable 2026-06-08 05:12:08.853372 Juniper ATP: Splunk credentials are in logged in clear text
HIGH (8.8)
Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T22:03:43.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0027 vulnerable 2026-06-08 05:12:08.833144 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration
MEDIUM (5.4)
A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-17T00:21:24.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0026 vulnerable 2026-06-08 05:12:08.832488 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration
MEDIUM (5.4)
A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T16:59:13.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0025 vulnerable 2026-06-08 05:12:08.831947 Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu
MEDIUM (5.4)
A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-17T00:21:45.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0024 vulnerable 2026-06-08 05:12:08.831363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0023 vulnerable 2026-06-08 05:12:08.830792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0022 vulnerable 2026-06-08 05:12:08.830298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0021 vulnerable 2026-06-08 05:12:08.829792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0020 vulnerable 2026-06-08 05:12:08.829251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0018 vulnerable 2026-06-08 05:12:08.816035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0004 vulnerable 2026-06-08 05:12:08.625759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.