CVE:CVE-2014-6447
CNNVD:CNNVD-201507-681
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。
Juniper Networks Junos OS中的J-Web错误处理存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Juniper Networks Junos OS 12.1X44-D45之前的12.1X44版本，12.1X46-D30之前的12.1X46版本，12.1X47-D20之前的12.1X47版本，12.3R8之前的12.3版本，12.3X48-D10之前的12.3X48版本，13.1R5之前的13.1版本，13.2R6之前的13.2版本，13.3R4之前的13.3版本，14.1R3之前的14.1版本，14.1X53-D10之前的14.1X53版本，14.2R1之前的14.2版本，15.1R1之前的15.1版本。
solution:Upgrade juniper junos to a higher version than 12.1x44,12.1x44:d10,12.1x44:d15,12.1x44:d20,12.1x44:d25,12.1x44:d30,12.1x44:d35,12.1x44:d40,12.1x46,12.1x46:d10,12.1x46:d15,12.1x46:d20,12.1x46:d25,12.1x47,12.1x47:d10,12.1x47:d15,12.3,12.3:r1,12.3:r2,12.3:r3,12.3:r4,12.3:r5,12.3:r6,12.3:r7,12.3x48,13.1,13.1:r1,13.1:r2,13.1:r3,13.1:r4,13.1:r4-s2,13.2,13.2:r1,13.2:r2,13.2:r3,13.2:r4,13.2:r5,13.3,13.3:r1,13.3:r10,13.3:r2,13.3:r2-s2,13.3:r3,14.1,14.1:r1,14.1:r2,14.1x53,14.2,15.1,and avoid the version 12.1x44,12.1x44:d10,12.1x44:d15,12.1x44:d20,12.1x44:d25,12.1x44:d30,12.1x44:d35,12.1x44:d40,12.1x46,12.1x46:d10,12.1x46:d15,12.1x46:d20,12.1x46:d25,12.1x47,12.1x47:d10,12.1x47:d15,12.3,12.3:r1,12.3:r2,12.3:r3,12.3:r4,12.3:r5,12.3:r6,12.3:r7,12.3x48,13.1,13.1:r1,13.1:r2,13.1:r3,13.1:r4,13.1:r4-s2,13.2,13.2:r1,13.2:r2,13.2:r3,13.2:r4,13.2:r5,13.3,13.3:r1,13.3:r10,13.3:r2,13.3:r2-s2,13.3:r3,14.1,14.1:r1,14.1:r2,14.1x53,14.2,15.1