CVE-2013-5649
Juniper Junos Pulse Secure Access Service <7.1r15-7.4r3 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow (1) remote attackers to inject arbitrary web script or HTML via vectors involving login pages, and allow (2) remote authenticated users to inject arbitrary web script or HTML via vectors involving a support page.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://kb.juniper.net/JSA10589
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/97240
Scores
EPSS
0.0026
EPSS Percentile
49.6%
Details
CWE
CWE-79
Status
published
Products (4)
juniper/ive_os
7.1
juniper/ive_os
7.2
juniper/ive_os
7.3
juniper/ive_os
7.4
Published
Sep 13, 2013
Tracked Since
Feb 18, 2026