CVE-2014-2711 Cross-site scripting in n/a

What is CVE-2014-2711?

CVE-2014-2711 is a medium-severity cross-site scripting vulnerability in Juniper Junos, published on 14 Apr 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.2 before 12.2R7, 12.3 before 12.3R6, 13.1 before 13.1R4, 13.2 before 13.2R3, and 13.3 before 13.3R1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Weakness: CWE-79

Which versions are affected by CVE-2014-2711?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2014-2711?

No fix has been published for CVE-2014-2711 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2014-2711 being exploited?

There is no known exploitation of CVE-2014-2711 in the wild and no public exploit code.

Other vulnerabilities in Juniper Junos

• CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Exploited Critical 9.8
• CVE-2020-1631 Juniper Junos OS Path Traversal Exploited High 8.8
• CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Exploited Medium 6.7
• CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Exploited Medium 5.3
• CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Exploited Medium 5.3

All Juniper Junos vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pr5p-4v5w-rpqw.