XSS in Juniper Smartpass
CVE-2013-3498
Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.018 (76.0th percentile) — read the EPSS interpretation.
Affected products
- Juniper Smartpass — versions 7.7, 8.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, vdb-entry)
- cve@mitre.org (vdb-entry)
- cve@mitre.org (Permissions Required, third-party-advisory)
- cve@mitre.org