{"cve":"CVE-2022-22242","epss":{"score":0.02785},"mitre":{"cpes":[],"created":"2022-10-18T02:46:44.522000+00:00","description":"A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2022/22xxx/CVE-2022-22242.json","references":["https://kb.juniper.net/JSA69899"],"title":"Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","updated":"2025-05-09T15:36:51.240000+00:00","vendors":[],"weaknesses":["CWE-79"]},"nvd":{"cpes":["cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*"],"created":"2022-10-18T03:15:11.033000+00:00","description":"A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2022/CVE-2022-22242.json","references":["https://kb.juniper.net/JSA69899"],"title":null,"updated":"2026-06-17T04:28:05.460000+00:00","vendors":["juniper","juniper$PRODUCT$junos"],"weaknesses":["CWE-79"]},"opencve":{"changes":[{"created":"2025-05-09T16:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"06f82ae9-919b-478e-af71-6c6095dc5e3e"},{"created":"2025-07-13T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.85707},"old":{"score":0.87403}}}},"type":"metrics"}],"id":"b748e2a7-0790-4594-a25f-6c58f2a6a6da"}],"cpes":{"data":["cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1-s9:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s5:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s6:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s7:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3-s8:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3-s4:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.3:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*","cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2022-10-18T02:46:44.522000+00:00","provider":"mitre"},"description":{"data":"A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.02785},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://kb.juniper.net/JSA69899"],"providers":["mitre","nvd"]},"title":{"data":"Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","provider":"mitre"},"updated":{"data":"2025-05-09T15:36:51.240000+00:00","provider":"mitre"},"vendors":{"data":["juniper","juniper$PRODUCT$junos"],"providers":["nvd"]},"weaknesses":{"data":["CWE-79"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2022-10-18T02:46:44.522000+00:00","description":"A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S1; 21.3 versions prior to 21.3R3; 21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","updated":"2025-05-09T15:36:48.664000+00:00","vendors":[],"vulnrichment_repo_path":"2022/22xxx/CVE-2022-22242.json","weaknesses":[]}}