4.3
CVSSv2

CVE-2012-5460

Published: 01/08/2013 Updated: 01/08/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS prior to 7.1r13, 7.2.x prior to 7.2r7, and 7.3.x prior to 7.3r2 allows remote malicious users to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

juniper ive_os 7.2

juniper ive_os 7.3

juniper ive_os 7.1

juniper secure_access_2000 -

juniper fips_secure_access_4500 -

juniper mag2600_gateway -

juniper mag6610_gateway -

juniper secure_access_4500 -

juniper secure_access_4000 -

juniper secure_access_6500 -

juniper secure_access_6000 -

juniper secure_access_700 -

juniper secure_access_2500 -

juniper mag6611_gateway -

juniper secure_access_virtual_appliance -

juniper fips_secure_access_4000 -

juniper fips_secure_access_6000 -

juniper fips_secure_access_6500 -

juniper mag4610_gateway -