CVE-2013-6957 Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the web administrative component in Juniper IDP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the ACM web server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper idp250 | All versions | No fix listed |
| juniper idp75 | All versions | No fix listed |
| juniper idp800 | All versions | No fix listed |
| juniper idp8200 | All versions | No fix listed |
References
- 100860 vdb-entry
- 1029491 vdb-entry
- kb.juniper.net vendor-advisory