CVE-2018-0059

Name of the Vulnerable Software and Affected Versions: Juniper Networks ScreenOS versions prior to 6.3.0r26

Description: A persistent cross-site scripting issue in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML, potentially stealing sensitive data and credentials from a web administration session. This could trick a subsequent administrative user into performing unintended administrative actions on the device.

Recommendations: For versions prior to 6.3.0r26, update to version 6.3.0r26 or later to resolve the issue.