CVE-2014-3824
Published Sep 29, 2014
Last updated 9 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE0C8957-0870-4070-AAD3-720EE46311EA"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47A21AF8-2618-4C7F-B250-BEDBBE9BE7F9"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6386D17E-158E-4F5E-B0C7-7719D0020CBF"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3C2B970-9EF2-40CE-86B4-B3FF8F788BC6"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B3A469E-C3EA-4A34-BCAB-CA18DFB245C4"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "601BEBCC-F133-40FB-A1B8-599889D05480"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DFCB2A6-FFF0-4108-B587-C27FB96FD75A"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A381B35A-750E-4E70-99DA-25C4837C9DDC"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D2E937F-6235-4040-ADAF-884304C7D65C"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3921140-1DDB-416E-9DC6-BB097C339A36"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36F6EE11-D19C-43DD-AFB8-D8AE60B5692F"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "810ABC69-F219-4060-A50E-5A9D531BF26A"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48CE0C3C-6E83-47DD-8FB0-45CA7C3B343B"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EF9BD90-90D8-4617-8BB7-9AA7FFCC1160"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBA1D6B0-E878-4364-83C5-FB6FB7C6B93E"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCD9F89E-5AFB-4B80-B615-6E4720FA8A57"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1r15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "134E62A7-0E1E-453B-AE43-EFF7BA700658"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.4:r1.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C503F416-17B4-45DA-9E36-9A8B14C2DEC4"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.4:r2.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECDD185D-A088-43A4-B4DE-599D22F1642C"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.4:r3.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49B32A49-885E-4C3D-8362-1E48B04F1FDE"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.4:r4.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B149DA0-3128-499D-969A-3231B682D25C"
},
{
"criteria": "cpe:2.3:a:juniper:junos_pulse_secure_access_service:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B390A8A0-D317-4EDE-9B1F-2CC53DC72C06"
}
],
"operator": "OR"
}
]
}
]