CVE-2012-1038

Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.62% chance of exploitation in the next 30 days, 76th percentile

Published

2013-04-03

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37429

Security advisories

• http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-6…
• http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004

References

• CVE Record
• NVD entry