CVE-2010-2289

CVE-2010-2289 describes an open redirect in Juniper Networks IVE. The vulnerability exists in the web-facing CGI path dana/home/homepage.cgi and is exploitable via the Location parameter, allowing remote attackers to redirect users to arbitrary sites and facilitate phishing. Affected products are...

CVE-2010-2288

CVE-2010-2288 describes an XSS vulnerability in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951). The issue arises in dana/nc/ncrun.cgi where an attacker can inject arbitrary web script or HTML via the DSSignInURL cookie, potentially affecting users who visit a crafted page. The p...