CVE-2019-0020

9.8 criticalEPSS 1.6%

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2019-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

juniper:advanced_threat_prevention

References

https://kb.juniper.net/JSA10918
https://kb.juniper.net/JSA10918

Check your stack JSON