Unscored severity · published Sep 29, 2014
CVE-2014-3824
Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r6, 7.4 before 7.4r13, and 7.1 before 7.1r20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JP
Junos Pulse Secure Access Service · Juniper
7.1; 7.1r1; 7.1r1.1; 7.1r2; 7.1r3; 7.1r4; +16 more · source: NVD
Affected product
JP
Junos Pulse Secure Access Service
Juniper
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3824
www.securityfocus.com
http://www.securityfocus.com/bid/69804
kb.juniper.net
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10646
More from Junos Pulse Secure Access Service
–
CVE-2014-3823
The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct…
–
CVE-2014-3820
Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before…
–
CVE-2013-5650
Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before…
–
CVE-2013-3970
Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1…