Unscored severity · published Aug 1, 2013
CVE-2012-5460
Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Fips Secure Access 4000 · Juniper
All versions, or not specified · source: NVD
FS
Fips Secure Access 4500 · Juniper
All versions, or not specified · source: NVD
FS
Fips Secure Access 6000 · Juniper
All versions, or not specified · source: NVD
FS
Fips Secure Access 6500 · Juniper
All versions, or not specified · source: NVD
IO
Ive OS · Juniper
7.1; 7.2; 7.3 · source: NVD
MG
Mag2600 Gateway · Juniper
All versions, or not specified · source: NVD
MG
Mag4610 Gateway · Juniper
All versions, or not specified · source: NVD
MG
Mag6610 Gateway · Juniper
All versions, or not specified · source: NVD
MG
Mag6611 Gateway · Juniper
All versions, or not specified · source: NVD
SA
Secure Access 2000 · Juniper
All versions, or not specified · source: NVD
SA
Secure Access 2500 · Juniper
All versions, or not specified · source: NVD
SA
Secure Access 4000 · Juniper
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5460
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html
Vendor Advisory
http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view
More from Fips Secure Access 4000
–
CVE-2014-3812
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x…