Juniper Paragon Active Assurance Control Center vulnerabilities

5 CVEs affecting Juniper Paragon Active Assurance Control Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30381, published 2024-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-0232, published 2021-04-22. High severity, CVSS 7.4. EPSS: 1% chance of exploitation in the next 30 days. An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already…
CVE-2022-22190, published 2022-04-14. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports,…
CVE-2022-22229, published 2022-10-18. High severity, CVSS 8.4. EPSS: 0.8% chance of exploitation in the next 30 days. An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability, a stored XSS (or persistent), in the Control Center Controller web pages of Juniper Networks…
CVE-2024-30381, published 2024-04-12. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance Control Center allows a network-adjacent attacker with root access to a Test…
CVE-2024-21589, published 2024-01-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating,…