CVEvulnerability
CVE-2012-1038
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.
Affected configurations
• juniper networks mobility system software 7.3
• juniper networks mobility system software 7.4
• juniper networks mobility system software 7.5
• juniper networks mobility system software 7.5.1.6
• juniper networks mobility system software 7.6
• juniper networks mobility system software 7.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view Vendor Advisory
- http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf Broken Link
- http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/ Third Party Advisory
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view Vendor Advisory
- http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf Broken Link
- http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/ Third Party Advisory