CVE-2012-5460 Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrar...
MediumCVSS 4.3
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper ive os | = 7.1 | No fix listed |
| juniper ive os | = 7.2 | No fix listed |
| juniper ive os | = 7.3 | No fix listed |
| juniper secure access virtual appliance | All versions | No fix listed |
| juniper fips secure access 4000 | All versions | No fix listed |
| juniper fips secure access 4500 | All versions | No fix listed |
| juniper fips secure access 6000 | All versions | No fix listed |
| juniper fips secure access 6500 | All versions | No fix listed |
| juniper mag2600 gateway | All versions | No fix listed |
| juniper mag4610 gateway | All versions | No fix listed |
| juniper mag6610 gateway | All versions | No fix listed |
| juniper mag6611 gateway | All versions | No fix listed |
| juniper secure access 2000 | All versions | No fix listed |
| juniper secure access 2500 | All versions | No fix listed |
| juniper secure access 4000 | All versions | No fix listed |
| juniper secure access 4500 | All versions | No fix listed |
| juniper secure access 6000 | All versions | No fix listed |
| juniper secure access 6500 | All versions | No fix listed |
| juniper secure access 700 | All versions | No fix listed |
References
- 20130722 Juniper Secure Access XSS Vulnerability mailing-list
- www.juniper.net vendor-advisory