CVE-2015-3004 - CVE House
Back to Database
Status published Medium CVE-2015-3004

J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35,...

Vulnerability Description

J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D10, 12.3X48 before 12.3X48-D10, 12.2 before 12.2R9, 12.3 before 12.3R7, 13.2 before 13.2R6, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R5, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, and 14.2 before 14.2R1 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-3004

Credits & Attribution

No credits recorded in the NVD database.

References

More from juniper

View All →
CVE-2021-39534
An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in...
High 8.8
CVE-2021-39533
An issue was discovered in libslax through v0.22.1. slaxLexer() in...
High 8.8
CVE-2021-39532
An issue was discovered in libslax through v0.22.1. A NULL...
Medium 6.5
CVE-2021-39531
An issue was discovered in libslax through v0.22.1. slaxLexer() in...
High 8.8
CVE-2019-0005
On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter...
Medium 5.3

Affected Vendor

Affected Software

junos
Vulnerable Versions:
12.1x44, 12.1x46, 12.1x47, 12.2, 12.3, 12.3x48, 13.2, 13.2x51, 13.3, 14.1, 14.1x53, 14.2

Timeline

Official Publish: April 10th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.