CVE-2015-3005

N/A

Published: April 10, 2015 at 02:00 PM UTC

Updated: June 17, 2026 at 12:25 AM UTC

13 products affected across 2 vendorsJunosSRX5600SRX5800

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

Cross-site scripting (XSS) vulnerability in the Dynamic VPN in Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, and 12.3X48 before 12.3X48-D10 on SRX series devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Junos · Juniper Networks

95%

12.1x44 12.1x44 d10 12.1x44 d15 12.1x44 d20 12.1x44 d25 12.1x44 d30 12.1x44 d35 12.1x44 d4012.1x4612.1x46 d10 12.1x46 d15 12.1x46 d2012.1x46 d2512.1x47 12.1x47 d10 12.1x48

juniper-srx100 (environment) · juniper-srx110 (environment) · juniper-srx1400 (environment) · juniper-srx210 (environment) · juniper-srx220 (environment) · juniper-srx240 (environment) · juniper-srx3400 (environment) · juniper-srx3600 (environment) · juniper-srx550 (environment) · juniper-srx5600 (environment) · juniper-srx5800 (environment) · juniper-srx650 (environment)

SRX100 · Juniperdevice

80%

All versions

SRX110 · Juniperdevice

80%

All versions

SRX1400 · Juniperdevice

80%

All versions

SRX210 · Juniperdevice

80%

All versions