CVE-2017-2338: ScreenOS: XSS vulnerability in ScreenOS Firewall

Security readout for executives and security teams

A lower-privileged ScreenOS WebUI user with the security role could store script content that runs in another management user's browser, including an administrator. If an administrator views the poisoned content, the attacker may act with admin permissions. This is high risk for affected Juniper SSG firewalls, but the source bundle does not show active exploitation. Exposure is limited to organizations still operating Juniper SSG Series devices on ScreenOS 6.3.0 releases earlier than 6.3.0r24, especially where multiple administrators or delegated security-role users use WebUI management. Treat this as a priority remediation item if legacy Juniper SSG firewalls remain in service. The business risk is privilege escalation inside firewall management, not broad internet wormability based on the provided evidence. Mitigation focus: Upgrade affected ScreenOS 6.3.0 SSG Series systems to 6.3.0r24 or later.; Confirm Juniper advisory JSA10782 for the vendor-recommended remediation path.; Restrict WebUI management access to trusted administrative networks..

Prepared

May 23, 2026, 09:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.