CVE-2018-0046

Name: CVE-2018-0046
Creator: NVD / NIST
Published: 2018-10-10T18:29:00.78+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.65%

Last modified Jun 17, 2026

CVE-2018-0046 is a vulnerability of currently unknown severity. A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.. EPSS estimates a 1.65% chance of exploitation in the next 30 days.

Description

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Metrics

EPSS Probability

1.65%

73.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Juniper	Junos Space	18.1r1

References

http://www.securityfocus.com/bid/105566Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041862Third Party Advisory, VDB Entry
https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0dPatch, Third Party Advisory
https://kb.juniper.net/JSA10880Vendor Advisory
http://www.securityfocus.com/bid/105566Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041862Third Party Advisory, VDB Entry
https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0dPatch, Third Party Advisory
https://kb.juniper.net/JSA10880Vendor Advisory

Timeline

Published: Oct 10, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-0046?

How severe is CVE-2018-0046?

Severity scoring for CVE-2018-0046 is pending analysis. The EPSS model estimates a 1.65% probability of exploitation in the next 30 days.

How do I fix CVE-2018-0046?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-0046?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST