CVE-2017-2336: ScreenOS: XSS vulnerability in ScreenOS Firewall

Security readout for executives and security teams

This flaw affects Juniper SSG firewalls running older ScreenOS 6.3.0 builds. A network attacker could trick an administrator into using a crafted WebUI request, causing malicious script to run in the admin session and potentially act with administrator permissions. Exposure is limited to Juniper SSG Series devices running ScreenOS 6.3.0 releases earlier than 6.3.0r24 with NetScreen WebUI management reachable to a network-based attacker. Treat this as urgent for any still-operating SSG firewall. The issue can turn administrator interaction into administrator-level control, and affected devices are security boundary systems. Priority depends on whether vulnerable WebUI management remains reachable. Mitigation focus: Upgrade affected SSG devices to ScreenOS 6.3.0r24 or later.; Review Juniper JSA10782 for current vendor remediation guidance.; Restrict NetScreen WebUI management access to trusted administrative networks..

Prepared

May 22, 2026, 18:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.