CVE-2014-3823

Published: Sep 29, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Affected (21)

Products: Juniper: Junos Pulse Secure Access Service

Juniper

1 product

Junos Pulse Secure Access Service

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos Pulse Secure Access Service	Version 7.1
Juniper Junos Pulse Secure Access Service	Version 7.1r1.1
Juniper Junos Pulse Secure Access Service	Version 7.1r10
Juniper Junos Pulse Secure Access Service	Version 7.1r11
Juniper Junos Pulse Secure Access Service	Version 7.1r12
Juniper Junos Pulse Secure Access Service	Version 7.1r13
Juniper Junos Pulse Secure Access Service	Version 7.1r14
Juniper Junos Pulse Secure Access Service	Version 7.1r15
Juniper Junos Pulse Secure Access Service	Version 7.1r2
Juniper Junos Pulse Secure Access Service	Version 7.1r3
Juniper Junos Pulse Secure Access Service	Version 7.1r4
Juniper Junos Pulse Secure Access Service	Version 7.1r5
Juniper Junos Pulse Secure Access Service	Version 7.1r6
Juniper Junos Pulse Secure Access Service	Version 7.1r7
Juniper Junos Pulse Secure Access Service	Version 7.1r8
Juniper Junos Pulse Secure Access Service	Version 7.1r9
Juniper Junos Pulse Secure Access Service	Version 7.4 r1.0
Juniper Junos Pulse Secure Access Service	Version 7.4 r2.0
Juniper Junos Pulse Secure Access Service	Version 7.4 r3.0
Juniper Junos Pulse Secure Access Service	Version 7.4 r4.0
Juniper Junos Pulse Secure Access Service	Version 8.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10647

Source: cve@mitre.org

Vendor Advisory

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10647

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.