CVE-2014-2291
Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote…
Does this matter?
Lower severity and a low EPSS score (0.94%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 0.94% probability · 59th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- juniper/ive os
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/57375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91770
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10617Vendor Advisory
- http://secunia.com/advisories/57375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91770
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10617Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.