CVE-2019-0027

CVE-2019-0027 describes a persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP, affecting versions prior to 5.0.3. An authenticated attacker could inject arbitrary scripts, potentially stealing sensitive data or credentials from a web administration session, and tricking subsequent administrative users into performing unintended actions. Rated Medium severity (CVSS 5.4), this vulnerability has a network attack vector and low attack complexity, with potential for limited confidentiality and integrity impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.