CVE-2014-2291 in Junos Pulse Secure Access Service信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-03-05

披露

2014-03-14

管理

已接受

条目

VDB-12607

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

3.5 (NVD)

EPSS

0.00936

KEV

否

活动

非常低

部门

Hospital, Energy, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-2291
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-2291
CVE Details	https://www.cvedetails.com/cve/CVE-2014-2291/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!