CVE-2014-2291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

CVE-2014-2292: Undefined Security Weakness

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors...

Juniper Junos Pulse Secure Access Service (IVE)跨站脚本漏洞

CVE ID:CVE-2013-6956 Juniper Networks的Secure Access是企业级的SSL VPN接入设备，设备上所运行的操作系统为Juniper IVE OS。 Juniper Junos Pulse Secure Access Service IVE在重写特性页面时没有正确过滤用户提交的输入，允许远程攻击者利用漏洞进行跨站脚本攻击，可构建恶意URI，诱使用户解析，可获取敏感信息或者劫持用户会话。 0 Juniper IVE OS 8.0 Juniper IVE OS 7.4r5 Juniper IVE OS 7.3r7 Juniper IVE OS...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) XSS (JSA10602)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by an unspecified cross-site scripting vulnerability that is present within a file that pertains to Secure Access Service Web rewriting feature pages host...

CVE-2013-6956

Cross-site scripting XSS vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to...

Cross site scripting

Cross-site scripting XSS vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to...

CVE-2013-6956

CVE-2013-6956 affects Juniper Junos Pulse Secure Access Service (IVE OS) when the web rewriting feature is enabled. The issue is a cross-site scripting vulnerability in the web rewrite pages, exploitable by remote authenticated users to inject arbitrary script or HTML. Affected IVE OS versions in...

CVE-2013-6956

Cross-site scripting XSS vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to...

CVE-2013-6956: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to...

Juniper Junos Pulse Secure Access Service IVE OS (SSL VPN) Multiple XSS (JSA10589)

According to its self-reported version, the version of Juniper Junos Pulse Secure Access Service IVE OS running on the remote host is affected by multiple unspecified cross-site scripting vulnerabilities that are present on the login and support pages hosted on the device's web server. An attacke...

CVE-2013-5650

CVE-2013-5650 details (connected docs): The vulnerability affects Junos Pulse Secure Access Service (IVE) and Pulse Access Control Service (UAC) when a hardware SSL acceleration card is enabled. A crafted packet can trigger a denial of service resulting in a device hang. Public materials confirm ...

CVE-2013-5650: Improper Input Validation

Junos Pulse Secure Access Service IVE 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service UAC 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote...

CVE-2013-5649

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

CVE-2013-5649

CVE-2013-5649 affects Juniper Junos Pulse Secure Access Service (IVE OS) SSL VPN. Vulnerable components are web login and a support page where input validation is insufficient, allowing XSS by unauthenticated users and authenticated users. Impact includes arbitrary script execution in the browser...

CVE-2013-5649: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow 1 remote attackers to inject arbitrary web script or HTML via vectors involving login pages, an...

Cross site scripting

Cross-site scripting XSS vulnerability in the help page in Juniper Secure Access SA with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter...

Juniper IVE OS Unintentionally Trusted Certificate Authorities

According to its self-reported version, the version of IVE OS running on the remote host has an insecure SSL configuration. Internal and development Certificate Authorities CAs used by Juniper during testing were mistakenly included and explicitly trusted in public releases of IVE OS. A...

Pulse Connect Secure Unsupported Version Detection

According to its self-reported version number, the installation of Pulse Connect Secure formerly known as Juniper IVE OS and Junos Pulse Secure IVE OS operating system on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released ...

CVE-2012-5460

CVE-2012-5460 is a documented XSS in Juniper Secure Access (IVE OS) on the help page, exploitable via the WWHSearchWordsText parameter. Affected versions are IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2. The vulnerability can allow an attacker to inject arbitrary web script/HT...

CVE-2012-5460: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help page in Juniper Secure Access SA with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter...