CVE-2022-22182: Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session

Published Apr 14, 2022

Updated

A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL that when visited by another user enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S10, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2; 21.2 versions prior to 21.2R1-S1, 21.2R2.

Affected Software

213 affected components

Juniper Junos=12.3

Juniper Junos=12.3-r1

Juniper Junos=12.3-r10

Juniper Junos=12.3-r10-s1

Juniper Junos=12.3-r10-s2

Juniper Junos=12.3-r11

Juniper Junos=12.3-r12

Juniper Junos=12.3-r12-s1

Juniper Junos=12.3-r12-s10

Juniper Junos=12.3-r12-s11

Juniper Junos=12.3-r12-s12

Juniper Junos=12.3-r12-s13

Juniper Junos=12.3-r12-s14

Juniper Junos=12.3-r12-s15

Juniper Junos=12.3-r12-s16

Juniper Junos=12.3-r12-s17

Juniper Junos=12.3-r12-s18

Juniper Junos=15.1

Juniper Junos=15.1-a1

Juniper Junos=15.1-f

Juniper Junos=15.1-f1

Juniper Junos=15.1-f2

Juniper Junos=15.1-f2-s1

Juniper Junos=15.1-f2-s2

Juniper Junos=15.1-f2-s3

Juniper Junos=15.1-f2-s4

Juniper Junos=15.1-f3

Juniper Junos=15.1-f4

Juniper Junos=15.1-f5

Juniper Junos=15.1-f5-s7

Juniper Junos=15.1-f6

Juniper Junos=15.1-f6-s1

Juniper Junos=15.1-f6-s10

Juniper Junos=15.1-f6-s12

Juniper Junos=15.1-f6-s2

Juniper Junos=15.1-f6-s3

Juniper Junos=15.1-f6-s4

Juniper Junos=15.1-f6-s5

Juniper Junos=15.1-f6-s6

Juniper Junos=15.1-f6-s7

Juniper Junos=15.1-f6-s8

Juniper Junos=15.1-f6-s9

Juniper Junos=15.1-f7

Juniper Junos=15.1-r

Juniper Junos=15.1-r1

Juniper Junos=15.1-r2

Juniper Junos=15.1-r3

Juniper Junos=15.1-r4

Juniper Junos=15.1-r4-s7

Juniper Junos=15.1-r4-s8

Juniper Junos=15.1-r4-s9

Juniper Junos=15.1-r5

Juniper Junos=15.1-r5-s1

Juniper Junos=15.1-r5-s3

Juniper Junos=15.1-r5-s5

Juniper Junos=15.1-r5-s6

Juniper Junos=15.1-r6

Juniper Junos=15.1-r6-s1

Juniper Junos=15.1-r6-s2

Juniper Junos=15.1-r6-s3

Juniper Junos=15.1-r6-s4

Juniper Junos=15.1-r6-s6

Juniper Junos=15.1-r7

Juniper Junos=15.1-r7-s1

Juniper Junos=15.1-r7-s2

Juniper Junos=15.1-r7-s3

Juniper Junos=15.1-r7-s4

Juniper Junos=15.1-r7-s5

Juniper Junos=15.1-r7-s6

Juniper Junos=15.1-r7-s7

Juniper Junos=15.1-r7-s8

Juniper Junos=15.1-r7-s9

Juniper Junos=18.3

Juniper Junos=18.3-r

Juniper Junos=18.3-r1

Juniper Junos=18.3-r1-s1

Juniper Junos=18.3-r1-s2

Juniper Junos=18.3-r1-s3

Juniper Junos=18.3-r1-s4

Juniper Junos=18.3-r1-s5

Juniper Junos=18.3-r1-s6

Juniper Junos=18.3-r2

Juniper Junos=18.3-r2-s1

Juniper Junos=18.3-r2-s2

Juniper Junos=18.3-r2-s3

Juniper Junos=18.3-r2-s4

Juniper Junos=18.3-r3

Juniper Junos=18.3-r3-s1

Juniper Junos=18.3-r3-s2

Juniper Junos=18.3-r3-s3

Juniper Junos=18.3-r3-s4

Juniper Junos=18.4

Juniper Junos=18.4-r1

Juniper Junos=18.4-r1-s1

Juniper Junos=18.4-r1-s2

Juniper Junos=18.4-r1-s3

Juniper Junos=18.4-r1-s4

Juniper Junos=18.4-r1-s5

Juniper Junos=18.4-r1-s6

Juniper Junos=18.4-r1-s7

Juniper Junos=18.4-r2

Juniper Junos=18.4-r2-s1

Juniper Junos=18.4-r2-s2

Juniper Junos=18.4-r2-s3

Juniper Junos=18.4-r2-s4

Juniper Junos=18.4-r2-s5

Juniper Junos=18.4-r2-s6

Juniper Junos=18.4-r2-s7

Juniper Junos=18.4-r2-s8

Juniper Junos=18.4-r2-s9

Juniper Junos=18.4-r3

Juniper Junos=18.4-r3-s1

Juniper Junos=18.4-r3-s10

Juniper Junos=18.4-r3-s11

Juniper Junos=18.4-r3-s2

Juniper Junos=18.4-r3-s3

Juniper Junos=18.4-r3-s4

Juniper Junos=18.4-r3-s5

Juniper Junos=18.4-r3-s6

Juniper Junos=18.4-r3-s7

Juniper Junos=18.4-r3-s8

Juniper Junos=19.1

Juniper Junos=19.1-r1

Juniper Junos=19.1-r1-s1

Juniper Junos=19.1-r1-s2

Juniper Junos=19.1-r1-s3

Juniper Junos=19.1-r1-s4

Juniper Junos=19.1-r1-s5

Juniper Junos=19.1-r1-s6

Juniper Junos=19.1-r2

Juniper Junos=19.1-r2-s1

Juniper Junos=19.1-r2-s2

Juniper Junos=19.1-r3

Juniper Junos=19.1-r3-s1

Juniper Junos=19.1-r3-s2

Juniper Junos=19.1-r3-s3

Juniper Junos=19.1-r3-s4

Juniper Junos=19.1-r3-s5

Juniper Junos=19.2

Juniper Junos=19.2-r1

Juniper Junos=19.2-r1-s1

Juniper Junos=19.2-r1-s2

Juniper Junos=19.2-r1-s3

Juniper Junos=19.2-r1-s4

Juniper Junos=19.2-r1-s5

Juniper Junos=19.2-r1-s6

Juniper Junos=19.2-r1-s7

Juniper Junos=19.2-r3

Juniper Junos=19.2-r3-s1

Juniper Junos=19.2-r3-s2

Juniper Junos=19.3

Juniper Junos=19.3-r1

Juniper Junos=19.3-r1-s1

Juniper Junos=19.3-r2

Juniper Junos=19.3-r2-s1

Juniper Junos=19.3-r2-s2

Juniper Junos=19.3-r2-s3

Juniper Junos=19.3-r2-s4

Juniper Junos=19.3-r2-s5

Juniper Junos=19.3-r3

Juniper Junos=19.3-r3-s1

Juniper Junos=19.3-r3-s2

Juniper Junos=19.4

Juniper Junos=19.4-r1

Juniper Junos=19.4-r1-s1

Juniper Junos=19.4-r1-s2

Juniper Junos=19.4-r1-s3

Juniper Junos=19.4-r1-s4

Juniper Junos=19.4-r2

Juniper Junos=19.4-r2-s1

Juniper Junos=19.4-r2-s2

Juniper Junos=19.4-r2-s3

Juniper Junos=19.4-r2-s4

Juniper Junos=19.4-r3

Juniper Junos=19.4-r3-s1

Juniper Junos=19.4-r3-s2

Juniper Junos=19.4-r3-s3

Juniper Junos=19.4-r3-s4

Juniper Junos=20.1

Juniper Junos=20.1-r1

Juniper Junos=20.1-r1-s1

Juniper Junos=20.1-r1-s2

Juniper Junos=20.1-r1-s3

Juniper Junos=20.1-r1-s4

Juniper Junos=20.1-r2

Juniper Junos=20.1-r2-s1

Juniper Junos=20.1-r2-s2

Juniper Junos=20.1-r3

Juniper Junos=20.1-r3-s1

Juniper Junos=20.2

Juniper Junos=20.2-r1

Juniper Junos=20.2-r1-s1

Juniper Junos=20.2-r1-s2

Juniper Junos=20.2-r1-s3

Juniper Junos=20.2-r2

Juniper Junos=20.2-r2-s1

Juniper Junos=20.2-r2-s2

Juniper Junos=20.2-r2-s3

Juniper Junos=20.2-r3

Juniper Junos=20.2-r3-s1

Juniper Junos=20.3

Juniper Junos=20.3-r1

Juniper Junos=20.3-r1-s1

Juniper Junos=20.3-r2

Juniper Junos=20.3-r2-s1

Juniper Junos=20.4

Juniper Junos=20.4-r1

Juniper Junos=20.4-r1-s1

Juniper Junos=20.4-r2

Juniper Junos=20.4-r2-s1

Juniper Junos=21.1

Juniper Junos=21.1-r1

Juniper Junos=21.2-r1

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.3R12-S19, 15.1R7-S10, 18.3R3-S5, 18.4R2-S10, 18.4R3-S9, 19.1R2-S3, 19.1R3-S6, 19.2R1-S8, 19.2R3-S3, 19.3R2-S6, 19.3R3-S3, 19.4R3-S5, 20.1R3-S2, 20.2R3-S2, 20.3R3, 20.4R2-S2, 20.4R3, 21.1R1-S1, 21.1R2, 21.2R1-S1, 21.2R2, 21.3R1, and all subsequent releases.

Event History

Apr 14, 2022

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-22182?

CVE-2022-22182 has a CVSS score indicating moderate severity due to its Cross-site Scripting (XSS) nature affecting Juniper Networks Junos OS J-Web.

How do I fix CVE-2022-22182?

To fix CVE-2022-22182, it is recommended to update your Junos OS to the latest patched version provided by Juniper Networks.

Who is affected by CVE-2022-22182?

CVE-2022-22182 affects multiple versions of Juniper Networks Junos OS, particularly those in versions 12.3 and 15.1 to 21.2.

What type of attack is possible with CVE-2022-22182?

CVE-2022-22182 allows attackers to execute commands on behalf of a target user, including administrative actions, through crafted URLs.

Can CVE-2022-22182 lead to unauthorized access?

Yes, CVE-2022-22182 can potentially lead to unauthorized access since it exploits XSS vulnerabilities to manipulate user permissions.