CVE-2012-1038 Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5....
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper networks mobility system software | = 7.3 | No fix listed |
| juniper networks mobility system software | = 7.4 | No fix listed |
| juniper networks mobility system software | = 7.5 | No fix listed |
| juniper networks mobility system software | = 7.5.1.6 | No fix listed |
| juniper networks mobility system software | = 7.6 | No fix listed |
| juniper networks mobility system software | = 7.7 | No fix listed |
References
- www.juniper.net vendor-advisory
- www.secureworks.com broken-link
- www.secureworks.com third-party-advisory