CVE-2017-2337

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the management session of other users including the administrator. This enables the lower-privileged user to effectively execute commands with the permissions of an administrator. This issue affects Juniper Networks ScreenOS 6.3.0 releases prior to 6.3.0r24 on SSG Series. No other Juniper Networks products or platforms are affected by this issue.

• CWE-79

• http://www.securityfocus.com/bid/99590Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038881Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10782Vendor Advisory
• http://www.securityfocus.com/bid/99590Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038881Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10782Vendor Advisory

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2331A firewall bypass vulnerability in Juniper Networks NorthSta…
• CVE-2017-2332An insufficient authentication vulnerability in Juniper Netw…
• CVE-2017-2333A persistent denial of service vulnerability in Juniper Netw…
• CVE-2017-2334An information leak vulnerability in Juniper Networks NorthS…
• CVE-2017-2335A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2336A reflected cross site scripting vulnerability in NetScreen …9.6
• CVE-2017-2338A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2339A persistent cross site scripting vulnerability in NetScreen…8.4
• CVE-2017-2340On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15…
• CVE-2017-2341An insufficient authentication vulnerability on platforms wh…8.8
• CVE-2017-2342MACsec feature on Juniper Networks Junos OS 15.1X49 prior to…8.1
• CVE-2017-2343The Integrated User Firewall (UserFW) feature was introduced…10