CVE-2012-5460

Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2013-08-01

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Fips Secure Access 4000 (Juniper)
• Fips Secure Access 4500 (Juniper)
• Fips Secure Access 6000 (Juniper)
• Fips Secure Access 6500 (Juniper)
• Ive Os (Juniper)
• Mag2600 Gateway (Juniper)
• Mag4610 Gateway (Juniper)
• Mag6610 Gateway (Juniper)
• Mag6611 Gateway (Juniper)
• Secure Access 2000 (Juniper)
• Secure Access 2500 (Juniper)
• Secure Access 4000 (Juniper)
• Secure Access 4500 (Juniper)
• Secure Access 6000 (Juniper)
• Secure Access 6500 (Juniper)
• Secure Access 700 (Juniper)
• Secure Access Virtual Appliance (Juniper)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-07/0148.html
• http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2013-03-874&viewMode=view