CVE-2014-3824

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-5527

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN versions 7.1 through 7.1r15 Juniper Junos Pulse Secure Access Service SSL VPN versions 7.4 through 7.4r2 Juniper Junos Pulse Secure Access Service SSL VPN versions 8.0 through 8.0r0 Juniper Jun...

PT-2014-5529

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS versions prior to 8.0r6 Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS versions prior to 7.4r13 Juniper Junos Pulse Secure Access Service SSL VPN...

PT-2014-1958

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service SSL VPN versions prior to 8.0r1 Junos Pulse Secure Access Service SSL VPN versions 7.4 before 7.4r5 Junos Pulse Secure Access Service SSL VPN versions 7.1 before 7.1r18 Description The issue allows remote...

CVE-2014-3823: Improper Input Validation

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-3820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

CVE-2014-3824: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-5519

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service SSL VPN versions prior to 7.4r5 Juniper Junos Pulse Secure Access Service SSL VPN versions 8.x prior to 8.0r1 Juniper Junos Pulse Access Control Service UAC versions prior to 4.4r5 Juniper Junos Pulse...

CVE-2014-3812: Undefined Security Weakness

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service UAC before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain...

PT-2014-4610

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service aka SSL VPN versions prior to 7.1r18 Junos Pulse Secure Access Service aka SSL VPN versions 7.3 before 7.3r10 Junos Pulse Secure Access Service aka SSL VPN versions 7.4 before 7.4r8 Junos Pulse Secure Access...

CVE-2014-2291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

PT-2014-4609

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN versions prior to 7.1r18 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.3 before 7.3r10 Juniper Junos Pulse Secure Access Service aka SSL VPN versions 7.4 before 7.4r8...

CVE-2014-2292: Undefined Security Weakness

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

PT-2013-6197

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service versions prior to 7.1r17 Junos Pulse Secure Access Service versions 7.3 prior to 7.3r8 Junos Pulse Secure Access Service versions 7.4 prior to 7.4r6 Junos Pulse Secure Access Service versions 8.0 prior to 8.0r...

CVE-2013-6956: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to...

CVE-2013-5650

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5650: Improper Input Validation

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

PT-2013-5712

Name of the Vulnerable Software and Affected Versions Junos Pulse Secure Access Service IVE versions 7.1 through 7.1r4 Junos Pulse Secure Access Service IVE versions 7.2 through 7.2r9 Junos Pulse Secure Access Service IVE versions 7.3 through 7.3r5 Junos Pulse Secure Access Service IVE versions 7...

PT-2013-5711

Name of the Vulnerable Software and Affected Versions Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.1 through 7.1r14 Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS versions 7.2 through 7.2r10 Juniper Junos Pulse Secure Access Service aka SSL VPN...

CVE-2013-5649: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...