Juniper Junos Pulse Luki w zabezpieczeniach

Oś czasu

Wersja

7.3r12
7.1r42
7.2r92
7.3r52
7.4r22

Przeciwdziałanie

Official Fix10
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Wykorzystywanie

High4
Functional0
Proof-of-Concept2
Unproven4
Not Defined0

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent0
Network8

Uwierzytelnianie

Not Defined0
High0
Low6
None4

Interakcja z użytkownikiem

Not Defined0
Required6
None4

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤62
≤70
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤60
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤52
≤62
≤70
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k2
<10k4
<25k4
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Affected Versions (11): 4.0, 7.1r4, 7.1r14, 7.2r9, 7.2r10, 7.3, 7.3r1, 7.3r5, 7.4, 7.4r2, 8.0

Link to Product Website: https://www.juniper.net/

Typ oprogramowania: Router Operating System

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2014-09-155.34.6Juniper Junos Pulse X-Frame-Options privilege escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2014-3823
2014-09-154.64.4Juniper Junos Pulse SSL VPN Web Server cross site scripting$5k-$25kObliczenieHighOfficial Fix0.00CVE-2014-3824
2014-09-153.53.4Juniper Junos Pulse SSL VPN/UAC Web Server cross site scripting$0-$5k$0-$5kHighOfficial Fix0.00CVE-2014-3820
2014-09-108.47.3Juniper Junos Pulse privilege escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2014-3811
2014-06-115.34.9Juniper Junos Pulse Encryption weak encryption$5k-$25k$0-$5kUnprovenUnavailable0.00CVE-2014-3812
2014-03-134.34.1Juniper Junos Pulse Secure Access Service Pulse Collaboration Secure Meeting User Pages cross site scripting$5k-$25k$0-$5kHighOfficial Fix0.00CVE-2014-2291
2014-03-127.86.8Juniper Junos Pulse Linux Network Connect Client privilege escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2014-2292
2013-09-126.36.0Juniper Junos Pulse Secure Access Service SSL VPN Web Server cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-5649
2013-09-117.56.5Juniper Junos Pulse Secure Access Service Packet privilege escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2013-5650
2013-03-065.44.9Juniper Secure Access/Junos Pulse Secure Access Service Search cross site scripting$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2012-5460

więcej wpisów autorstwa Juniper

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!