Unrated severityNVD Advisory· Published Sep 13, 2013· Updated Jun 16, 2026
CVE-2013-5649
CVE-2013-5649
Description
Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3 allow (1) remote attackers to inject arbitrary web script or HTML via vectors involving login pages, and allow (2) remote authenticated users to inject arbitrary web script or HTML via vectors involving a support page.
Affected products
5cpe:2.3:o:juniper:ive_os:7.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:juniper:ive_os:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:ive_os:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:ive_os:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*
- Range: <7.1r15, <7.2r11, <7.3r6, <7.4r3
Patches
Vulnerability mechanics
References
2- kb.juniper.net/JSA10589nvdVendor Advisory
- osvdb.org/97240nvd
News mentions
0No linked articles in our index yet.