CVE-2008-6096

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-09 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the (1) web interface login page or the (2) telnet login page.

Affected products

Juniper Netscreen Screenos: through 5.4.0r9.0; 1.6.0, 2.0.0, 2.5.0, 2.6.0, 2.6.1, 2.6.1r1 (+132)

References

http://secunia.com/advisories/32078
http://www.layereddefense.com/netscreen01oct.html
http://www.securityfocus.com/bid/31528
http://www.vupen.com/english/advisories/2008/2713
http://secunia.com/advisories/32078
http://www.layereddefense.com/netscreen01oct.html
http://www.securityfocus.com/bid/31528
http://www.vupen.com/english/advisories/2008/2713

Get alerted when CVE-2008-6096 or the next vulnerability affects your stack