CVE-2013-6957

2013-12-1318:07:54

CWE-79

[email protected]

web.nvd.nist.gov

juniper

idp

xss

vulnerability

remote attackers

web script

html

acm web server

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

56.8%

JSON

Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server.

Affected configurations

NVD

Node

juniperidp250Match-

juniperidp75Match-

juniperidp800Match-

juniperidp8200Match-

CPENameOperatorVersion
juniper:idp250juniper idp250eq-
juniper:idp75juniper idp75eq-
juniper:idp800juniper idp800eq-
juniper:idp8200juniper idp8200eq-