An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.
References
| Link | Resource |
|---|---|
| https://supportportal.juniper.net/JSA112183 |
Configurations
No configuration.
History
28 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-28 17:17
Updated : 2026-10-28 17:17
NVD link : CVE-2026-103405
Mitre link : CVE-2026-103405
CVE.ORG link : CVE-2026-103405
JSON object : View
Products Affected
No product.
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')