Atp700
Vendor:
First CVE: Jan 15, 2019 · Active for 7 years
13
Total CVEs
More Total CVEs than 91% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Atp700 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 15, 2019
7 years ago
Most Recent CVE
Jul 15, 2021
1,835 days ago
CVE Severity & Scoring
Atp70013 CVEs
69%
15%
15%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (23.1%)
Network9 (69.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (7.7%)
Attack Complexity
Low12 (92.3%)
High1 (7.7%)
Unknown0 (0.0%)
User Interaction
None7 (53.8%)
Unknown0 (0.0%)
Required6 (46.2%)
Privileges Required
Low9 (69.2%)
High1 (7.7%)
None3 (23.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-0022CRITICAL Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected re | Jan 15, 2019 | 9.8 | 32 | NO | NO |
CVE-2019-0020CRITICAL Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected r | Jan 15, 2019 | 9.8 | 31 | NO | NO |
CVE-2019-0030HIGH Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to | Jan 15, 2019 | 7.2 | 24 | NO | NO |
CVE-2019-0029HIGH Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affec | Jan 15, 2019 | 7.8 | 24 | NO | NO |
CVE-2019-0004MEDIUM On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI inter | Jan 15, 2019 | 5.5 | 21 | NO | NO |
CVE-2021-0289MEDIUM When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability b | Jul 15, 2021 | 5.3 | 20 | NO | NO |
CVE-2019-0027MEDIUM A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive da | Jan 15, 2019 | 5.4 | 20 | NO | NO |
CVE-2019-0026MEDIUM A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and | Jan 15, 2019 | 5.4 | 20 | NO | NO |
CVE-2019-0025MEDIUM A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data a | Jan 15, 2019 | 5.4 | 20 | NO | NO |
CVE-2019-0024MEDIUM A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data a | Jan 15, 2019 | 5.4 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Atp700
Top CWEs
Versions
No cataloged versions.