VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 15, 2010· Updated Jun 16, 2026

CVE-2010-2288

CVE-2010-2288

Description

Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie.

Affected products

3
  • Juniper Networks/Secure Access 20002 versions
    cpe:2.3:a:juniper:secure_access:6.5:r1.0:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:juniper:secure_access:6.5:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:juniper:secure_access:6.5:r2.0:*:*:*:*:*:*
  • Juniper Networks/Ive OSllm-create
    Range: = 6.5R1 (Build 14599) / = 6.5R2 (Build 14951)

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.