CVE-2010-2288: Juniper Secure Access

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2 (Build 14951) allows remote attackers to inject arbitrary web script or HTML via the DSSignInURL cookie.

Affected products

• Juniper Secure Access: version 6.5 only

Published 2010-06-15. Last modified 2026-06-16.