Juniper Mist Cloud UI vulnerabilities

3 CVEs affecting Juniper Mist Cloud UI, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1677, published 2020-10-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1676, published 2020-10-16. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its…
CVE-2020-1675, published 2020-10-16. High severity, CVSS 8.3. EPSS: 0.6% chance of exploitation in the next 30 days. When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious…
CVE-2020-1677, published 2020-10-16. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without…