medium4.3
CVE-2012-5460
Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 a…
Impact
Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Juniper | Ive Os | Versions 7.1, 7.2, 7.3 |
| Juniper | Secure Access Virtual Appliance | All versions |
| Juniper | Fips Secure Access 4000 | All versions |
| Juniper | Fips Secure Access 4500 | All versions |
| Juniper | Fips Secure Access 6000 | All versions |
| Juniper | Fips Secure Access 6500 | All versions |
| Juniper | Mag2600 Gateway | All versions |
| Juniper | Mag4610 Gateway | All versions |
| Juniper | Mag6610 Gateway | All versions |
| Juniper | Mag6611 Gateway | All versions |
| Juniper | Secure Access 2000 | All versions |
| Juniper | Secure Access 2500 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view