CVE-2015-5369

Pulse Connect Secure aka PCS and formerly Juniper PCS PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished T...

Design/Logic Flaw

Pulse Connect Secure aka PCS and formerly Juniper PCS PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished T...

CVE-2015-5369

Pulse Connect Secure (PCS) devices with Hardware Acceleration enabled are affected by CVE-2015-5369 due to improper validation of the TLS Finished handshake, enabling MITM via a crafted Finished message. Affected lines include PCS 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 ...

CVE-2015-5369

Pulse Connect Secure aka PCS and formerly Juniper PCS PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished T...

Juniper Pulse Secure TCP Hardware Acceleration User Data Access Vulnerability

Juniper Networks' Secure Access is an enterprise-grade SSL VPN access device, and the operating system running on the device is Juniper IVE OS. A security vulnerability in Juniper Pulse Secure TCP Hardware Acceleration allows remote users to exploit a TCP handshake checksum vulnerability which, i...

Microsoft security advisory: Update for vulnerability in Juniper Networks Windows In-Box Junos Pulse client: June 9, 2015

None None...

MS KB3062760: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (FREAK)

The remote Windows host is missing KB3062760, which resolves multiple OpenSSL vulnerabilities in the Juniper Networks Windows In-Box Junos Pulse client shipped with Windows 8.1 : - A flaw exists with ECDH handshakes when using an ECDSA certificate without a ServerKeyExchange message. This allows ...

CVE-2014-6882

The CVE-2014-6882 entry concerns the Android app for Western Federal Credit Union (version 2.1), which does not verify X.509 certificates when connecting to SSL servers. This creates a risk of man-in-the-middle attacks, potentially allowing a crafted certificate to spoof the server and expose sen...

CVE-2014-3820

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

CVE-2014-3811

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...

CVE-2014-3824

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3823

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

CVE-2014-3811

Juniper Installer Service JIS Client 7.x before 7.4R6 for Windows and Junos Pulse Client before 4.0R6 allows local users to gain privileges via unspecified vectors...

CVE-2014-3820

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

CVE-2014-3824

Cross-site scripting XSS vulnerability in the web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3823

The Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-3824

CVE-2014-3824 describes a cross-site scripting (XSS) vulnerability in the web server of Juniper Junos Pulse Secure Access Service (SSL VPN) devices using IVE OS. The issue stems from incorrect user input validation on the SSL VPN web page, potentially enabling an attacker to inject arbitrary scri...

CVE-2014-3811

CVE-2014-3811 affects Juniper Installer Service (JIS) Client on Windows (7.x before 7.4R6) and Junos Pulse Client before 4.0R6, enabling local privilege escalation. Root cause is not detailed in the provided sources. Impact is high (local, full confidentiality/integrity/availability). Remediation...