CVE-2012-1038

Juniper Networks MSS <7.6.3-7.7.1-7.5.3-7.4-7.3 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Craig Lambert · textremotehardware
https://www.exploit-db.com/exploits/37429

References (3)

Scores

EPSS 0.0105
EPSS Percentile 77.3%

Details

CWE
CWE-79
Status published
Products (7)
juniper/networks_mobility_system_software
juniper/networks_mobility_system_software
juniper/networks_mobility_system_software
juniper/networks_mobility_system_software
juniper/networks_mobility_system_software
juniper/networks_mobility_system_software
n/a/n/a
Published Apr 03, 2013
Tracked Since Feb 18, 2026