CVE-2014-3824

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3823: Improper Input Validation

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-3820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

PT-2014-5529

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS versions prior to 8.0r6 Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS versions prior to 7.4r13 Juniper Junos Pulse Secure Access Service SSL VPN...

CVE-2014-3812: Undefined Security Weakness

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...

PT-2014-5519

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN versions prior to 7.4r5 Juniper Junos Pulse Secure Access Service SSL VPN versions 8.x prior to 8.0r1 Juniper Junos Pulse Access Control Service UAC versions prior to 4.4r5 Juniper Junos Pulse...

CVE-2014-2291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

CVE-2014-2292: Undefined Security Weakness

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

CVE-2013-5649: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

PT-2013-5711

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.1 through 7.1r14 Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.2 through 7.2r10 Juniper Junos Pulse Secure Access Service aka SSL VPN...

PT-2013-4766

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.0r2 through 7.0r8 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.1r1 through 7.1r5 Juniper Junos Pulse Access Control Service aka UAC versions 4.1r1 through 4.1...

CVE-2013-3970: Undefined Security Weakness

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...