CVE-2017-2335: ScreenOS: XSS vulnerability in ScreenOS Firewall

Security readout for executives and security teams

This flaw lets a lower-privileged “security” user in Juniper NetScreen WebUI plant persistent script content that runs in another administrator’s management session. If an administrator views the affected content, the attacker may act with administrator permissions. It is high risk for organizations still running affected ScreenOS on SSG Series firewalls. Exposure is limited to Juniper NetScreen Firewall+VPN SSG Series devices running ScreenOS 6.3.0 releases earlier than 6.3.0r24. The source states no other Juniper products or platforms are affected. Risk depends on WebUI availability and whether security-role users exist. Treat this as a high-priority legacy firewall remediation item. The issue can turn a lower-privileged management user into effective administrator control if an admin interacts with injected content. Prioritize any internet-reachable or broadly reachable management interfaces first. Mitigation focus: Upgrade affected ScreenOS 6.3.0 deployments to 6.3.0r24 or later per Juniper guidance.; Review Juniper advisory JSA10782 before applying changes.; Restrict NetScreen WebUI access to trusted management networks..

Prepared

May 23, 2026, 09:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.