CVE-2014-3820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

PT-2014-5527

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN versions 7.1 through 7.1r15 Juniper Junos Pulse Secure Access Service SSL VPN versions 7.4 through 7.4r2 Juniper Junos Pulse Secure Access Service SSL VPN versions 8.0 through 8.0r0 Juniper Jun...

CVE-2014-3812

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...

PT-2014-5519

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN versions prior to 7.4r5 Juniper Junos Pulse Secure Access Service SSL VPN versions 8.x prior to 8.0r1 Juniper Junos Pulse Access Control Service UAC versions prior to 4.4r5 Juniper Junos Pulse...

CVE-2014-3812: Undefined Security Weakness

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...

Design/Logic Flaw

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5650: Improper Input Validation

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

PT-2013-5712

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service IVE versions 7.1 through 7.1r4 Junos Pulse Secure Access Service IVE versions 7.2 through 7.2r9 Junos Pulse Secure Access Service IVE versions 7.3 through 7.3r5 Junos Pulse Secure Access Service IVE versions 7...

Design/Logic Flaw

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...

PT-2013-4766

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.0r2 through 7.0r8 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.1r1 through 7.1r5 Juniper Junos Pulse Access Control Service aka UAC versions 4.1r1 through 4.1...

CVE-2013-3970: Undefined Security Weakness

Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service aka UAC with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority CA certificate in the Trusted Server CAs list, which makes it easier...