Unscored severity · published May 8, 2013
CVE-2013-3498
Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Smartpass · Juniper
7.7; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3498
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3498
Permissions Required
http://secunia.com/advisories/53359
Third Party Advisory
http://www.securitytracker.com/id/1028529
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84110
supportportal.juniper.net
https://supportportal.juniper.net/JSA10568
More from Smartpass
–
CVE-2014-6381
Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast"…