CVE-2013-6956

Juniper IVE OS - Authenticated Cross-Site Scripting via Web Rewriting Feature

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the Secure Access Service Web rewriting feature in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r17, 7.3 before 7.3r8, 7.4 before 7.4r6, and 8.0 before 8.0r1, when web rewrite is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/100862
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029489

Scores

EPSS 0.0021
EPSS Percentile 43.1%

Details

CWE
CWE-79
Status published
Products (4)
juniper/ive_os 7.1
juniper/ive_os 7.3
juniper/ive_os 7.4
juniper/ive_os 8.0
Published Dec 13, 2013
Tracked Since Feb 18, 2026