https://kb.juniper.net/JSA11238

A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web administration session, or hijack another user's active session to perform administrative actions. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2021-31373

medium

Tenable Plugins

medium