CVE-2017-2339

CVE-2017-2339 is a persistent cross-site scripting (XSS) vulnerability in the NetScreen WebUI of Juniper Networks ScreenOS, specifically affecting versions 6.3.0 prior to 6.3.0r24 on SSG Series devices. This flaw allows a user with the 'security' role to inject malicious HTML/JavaScript into the management session of other users, including administrators. The vulnerability has a CVSS v3.0 score of 5.4 (MEDIUM), indicating a network-based attack with low privileges required and user interaction. Successful exploitation could lead to limited confidentiality and integrity impacts, as the lower-privileged user could effectively execute commands with administrator permissions. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild.