AT
Product
Advanced Threat Prevention
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 8Low 0
Watch
Add Advanced Threat Prevention to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0022 | 9.8 | Jan 15 | Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software. Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0020 | 9.8 | Jan 15 | Juniper ATP: Hard coded credentials used in Web Collector Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0029 | 7.8 | Jan 15 | Juniper ATP: Splunk credentials are in logged in clear text Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0004 | 5.5 | Jan 15 | Juniper ATP: API and device keys are logged in a world-readable permissions file Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0021 | 5.5 | Jan 15 | Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text Affected: 5.0.0 before 5.0.4 |
| CVE-2019-0023 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0024 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0025 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0026 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0027 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration Affected: 5.0.0 before 5.0.3 |
| CVE-2019-0018 | 5.4 | Jan 15 | Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu Affected: 5.0.0 before 5.0.3 |
Showing 11