CVE-2014-3823

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 52.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Juniper Junos Pulse Secure Access Service
Timeline
PublishedSep 29
Latest updateMay 17

Description

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-x6pp-j24v-837c: The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8↗2022-05-17
▶
CVEList
CVE-2014-3823: The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8↗2014-09-29
▶

📋Vendor Advisories

1
Juniper
CVE-2014-3823: The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote at↗2014-09-29
▶