CVE-2018-0046

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

• CWE-79

• http://www.securityfocus.com/bid/105566Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041862Third Party Advisory, VDB Entry
• https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0dPatch, Third Party Advisory
• https://kb.juniper.net/JSA10880Vendor Advisory
• http://www.securityfocus.com/bid/105566Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041862Third Party Advisory, VDB Entry
• https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0dPatch, Third Party Advisory
• https://kb.juniper.net/JSA10880Vendor Advisory

Published

Oct 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0040Juniper Networks Contrail Service Orchestrator versions prio…9.8
• CVE-2018-0041Juniper Networks Contrail Service Orchestration releases pri…9.8
• CVE-2018-0042Juniper Networks CSO versions prior to 4.0.0 may log passwor…
• CVE-2018-0043Receipt of a specific MPLS packet may cause the routing prot…8.8
• CVE-2018-0044An insecure SSHD configuration in Juniper Device Manager (JD…9.8
• CVE-2018-0045Receipt of a specific Draft-Rosen MVPN control packet may ca…8.8
• CVE-2018-0047A persistent cross-site scripting vulnerability in the UI fr…8
• CVE-2018-0048A vulnerability in the Routing Protocols Daemon (RPD) with J…7.5
• CVE-2018-0049A NULL Pointer Dereference vulnerability in Juniper Networks…7.5
• CVE-2018-0050An error handling vulnerability in Routing Protocols Daemon …7.5
• CVE-2018-0051A Denial of Service vulnerability in the SIP application lay…7.5
• CVE-2018-0052If RSH service is enabled on Junos OS and if the PAM authent…7.2