Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2023-28962

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to 19.4R3-S11; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3-S6; 21.1 version 21.1R1 and later versions; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S3; 22.1 versions prior to 22.1R3-S1; 22.2 versions prior to 22.2R2-S1, 22.2R3; 22.3 versions prior to 22.3R1-S2, 22.3R2.

  • Published: Apr 18, 2023
  • Updated: May 10, 2024
  • CVE: CVE-2023-28962
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
juniper / junos 19.4-r1 19.4-r1.x
juniper / junos 20.1-r1 20.1-r1.x
juniper / junos 19.4-r1-s1 19.4-r1-s1.x
juniper / junos 19.4-r1-s2 19.4-r1-s2.x
juniper / junos 20.1-r1-s1 20.1-r1-s1.x
juniper / junos 20.2-r1 20.2-r1.x
juniper / junos 20.1-r1-s2 20.1-r1-s2.x
juniper / junos 20.1-r1-s3 20.1-r1-s3.x
juniper / junos 19.4-r2 19.4-r2.x
juniper / junos 19.4-r2-s1 19.4-r2-s1.x
juniper / junos 20.2-r1-s1 20.2-r1-s1.x
juniper / junos 20.2-r1-s2 20.2-r1-s2.x
juniper / junos 19.4-r2-s2 19.4-r2-s2.x
juniper / junos 19.4-r3 19.4-r3.x
juniper / junos 20.3-r1 20.3-r1.x
juniper / junos 20.1-r1-s4 20.1-r1-s4.x
juniper / junos 20.3-r1-s1 20.3-r1-s1.x
juniper / junos 20.2-r1-s3 20.2-r1-s3.x
juniper / junos 19.4-r3-s1 19.4-r3-s1.x
juniper / junos 19.4-r2-s3 19.4-r2-s3.x
juniper / junos 20.2-r2 20.2-r2.x
juniper / junos 20.2-r2-s1 20.2-r2-s1.x
juniper / junos 19.4-r1-s3 19.4-r1-s3.x
juniper / junos 20.4-r1 20.4-r1.x
juniper / junos 20.2-r2-s2 20.2-r2-s2.x
juniper / junos 20.1-r2 20.1-r2.x
juniper / junos 20.1-r2-s1 20.1-r2-s1.x
juniper / junos 20.4-r1-s1 20.4-r1-s1.x
juniper / junos 20.2-r2-s3 20.2-r2-s3.x
juniper / junos 20.3-r2 20.3-r2.x
juniper / junos 21.1-r1 21.1-r1.x
juniper / junos 20.4-r2 20.4-r2.x
juniper / junos 20.3-r2-s1 20.3-r2-s1.x
juniper / junos 20.2-r3 20.2-r3.x
juniper / junos 20.2-r3-s1 20.2-r3-s1.x
juniper / junos 20.1-r3 20.1-r3.x
juniper / junos 19.4-r3-s2 19.4-r3-s2.x
juniper / junos 19.4-r3-s3 19.4-r3-s3.x
juniper / junos 19.4-r3-s4 19.4-r3-s4.x
juniper / junos 20.1-r2-s2 20.1-r2-s2.x
juniper / junos 21.2-r1 21.2-r1.x
juniper / junos 20.4-r2-s1 20.4-r2-s1.x
juniper / junos 21.1-r1-s1 21.1-r1-s1.x
juniper / junos 20.3-r3 20.3-r3.x
juniper / junos 19.4-r2-s4 19.4-r2-s4.x
juniper / junos 19.4-r3-s5 19.4-r3-s5.x
juniper / junos 19.4-r1-s4 19.4-r1-s4.x
juniper / junos 19.4-r2-s5 19.4-r2-s5.x
juniper / junos 20.2-r3-s2 20.2-r3-s2.x
juniper / junos 20.1-r3-s1 20.1-r3-s1.x
juniper / junos 21.2-r1-s1 21.2-r1-s1.x
juniper / junos 21.1-r2 21.1-r2.x
juniper / junos 19.4-r3-s6 19.4-r3-s6.x
juniper / junos 20.4-r3 20.4-r3.x
juniper / junos 19.4 19.4.x
juniper / junos 20.1-r3-s2 20.1-r3-s2.x
juniper / junos 20.2-r3-s3 20.2-r3-s3.x
juniper / junos 20.3-r3-s1 20.3-r3-s1.x
juniper / junos 21.3-r1 21.3-r1.x
juniper / junos 21.3-r2 21.3-r2.x
juniper / junos 21.2-r2 21.2-r2.x
juniper / junos 20.4-r3-s1 20.4-r3-s1.x
juniper / junos 20.4-r2-s2 20.4-r2-s2.x
juniper / junos 21.1-r3 21.1-r3.x
juniper / junos 21.1-r2-s1 21.1-r2-s1.x
juniper / junos 21.2 21.2.x
juniper / junos 21.1 21.1.x
juniper / junos 20.4 20.4.x
juniper / junos 20.3 20.3.x
juniper / junos 20.2 20.2.x
juniper / junos 20.1 20.1.x
juniper / junos 21.1-r2-s2 21.1-r2-s2.x
juniper / junos 21.2-r1-s2 21.2-r1-s2.x
juniper / junos 21.2-r2-s1 21.2-r2-s1.x
juniper / junos 20.1-r3-s3 20.1-r3-s3.x
juniper / junos 21.2-r2-s2 21.2-r2-s2.x
juniper / junos 21.4-r1-s1 21.4-r1-s1.x
juniper / junos 21.3-r1-s1 21.3-r1-s1.x
juniper / junos 21.3-r1-s2 21.3-r1-s2.x
juniper / junos 21.4-r1 21.4-r1.x
juniper / junos 20.3-r3-s2 20.3-r3-s2.x
juniper / junos 21.3-r2-s1 21.3-r2-s1.x
juniper / junos 21.3-r2-s2 21.3-r2-s2.x
juniper / junos 21.4-r1-s2 21.4-r1-s2.x
juniper / junos 19.4-r2-s6 19.4-r2-s6.x
juniper / junos 19.4-r3-s7 19.4-r3-s7.x
juniper / junos 20.2-r3-s4 20.2-r3-s4.x
juniper / junos 20.3-r1-s2 20.3-r1-s2.x
juniper / junos 20.3-r3-s3 20.3-r3-s3.x
juniper / junos 20.4-r3-s2 20.4-r3-s2.x
juniper / junos 21.1-r3-s1 21.1-r3-s1.x
juniper / junos 21.2-r3 21.2-r3.x
juniper / junos 22.1-r1 22.1-r1.x
juniper / junos 21.3-r3 21.3-r3.x
juniper / junos 21.3-r3-s1 21.3-r3-s1.x
juniper / junos 21.4-r2 21.4-r2.x
juniper / junos 21.4-r2-s1 21.4-r2-s1.x
juniper / junos 20.4-r3-s3 20.4-r3-s3.x
juniper / junos 21.4 21.4.x
juniper / junos 21.3 21.3.x
juniper / junos - 19.4
juniper / junos 21.1-r3-s2 21.1-r3-s2.x
juniper / junos 22.1-r1-s1 22.1-r1-s1.x
juniper / junos 22.1-r2 22.1-r2.x
juniper / junos 21.4-r3 21.4-r3.x
juniper / junos 22.1-r1-s2 22.1-r1-s2.x
juniper / junos 22.1-r2-s2 22.1-r2-s2.x
juniper / junos 21.4-r2-s2 21.4-r2-s2.x
juniper / junos 20.3-r3-s5 20.3-r3-s5.x
juniper / junos 20.1-r3-s4 20.1-r3-s4.x
juniper / junos 19.4-r3-s8 19.4-r3-s8.x
juniper / junos 20.3-r3-s4 20.3-r3-s4.x
juniper / junos 22.2-r1 22.2-r1.x
juniper / junos 22.2-r1-s1 22.2-r1-s1.x
juniper / junos 20.4-r3-s4 20.4-r3-s4.x
juniper / junos 21.2-r3-s2 21.2-r3-s2.x
juniper / junos 19.4-r2-s7 19.4-r2-s7.x
juniper / junos 21.2-r3-s1 21.2-r3-s1.x
juniper / junos 22.3-r1 22.3-r1.x
juniper / junos 21.1-r3-s3 21.1-r3-s3.x
juniper / junos 22.2-r2 22.2-r2.x
juniper / junos 20.2-r3-s5 20.2-r3-s5.x
juniper / junos 20.2-r3-s6 20.2-r3-s6.x
juniper / junos 21.1-r3-s4 21.1-r3-s4.x
juniper / junos 19.4-r3-s10 19.4-r3-s10.x
juniper / junos 19.4-r3-s9 19.4-r3-s9.x
juniper / junos 20.3-r3-s6 20.3-r3-s6.x
juniper / junos 21.3-r3-s2 21.3-r3-s2.x
juniper / junos 22.1-r3 22.1-r3.x
juniper / junos 20.4-r3-s5 20.4-r3-s5.x
juniper / junos 22.2-r1-s2 22.2-r1-s2.x
juniper / junos 21.4-r3-s1 21.4-r3-s1.x
juniper / junos 22.1-r2-s1 22.1-r2-s1.x
juniper / junos 20.1-r3-s5 20.1-r3-s5.x
juniper / junos 21.2-r3-s3 21.2-r3-s3.x
juniper / junos 21.4-r3-s2 21.4-r3-s2.x
juniper / junos 22.3-r1-s1 22.3-r1-s1.x
juniper / junos 21.1-r3-s5 21.1-r3-s5.x