CVE-2014-3820 | BDVDB-2026-64418 Detail

Description#

Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4 before 4.4r3 and 5.0 before 5.0r1 allows remote administrators to inject arbitrary web script or HTML via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10645
http://www.securitytracker.com/id/1030852

Exploit#

No public exploit known

History#

Version 12014-09-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.