CVE-2009-3485: Juniper Junos

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI.

Affected products

• Juniper Junos: version 8.5 only; version 9.0 only

Published 2009-09-30. Last modified 2026-06-16.