CVE-2012-5460: Juniper Fips Secure Access 4000

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitrary web script or HTML via the WWHSearchWordsText parameter.

Affected products

• Juniper Fips Secure Access 4000: affected versions not specified
• Juniper Fips Secure Access 4500: affected versions not specified
• Juniper Fips Secure Access 6000: affected versions not specified
• Juniper Fips Secure Access 6500: affected versions not specified
• Juniper Ive OS: version 7.1 only; version 7.2 only; version 7.3 only
• Juniper MAG2600 Gateway: affected versions not specified
• Juniper MAG4610 Gateway: affected versions not specified
• Juniper MAG6610 Gateway: affected versions not specified
• Juniper MAG6611 Gateway: affected versions not specified
• Juniper Secure Access 2000: affected versions not specified
• Juniper Secure Access 2500: affected versions not specified
• Juniper Secure Access 4000: affected versions not specified
• Juniper Secure Access 4500: affected versions not specified
• Juniper Secure Access 6000: affected versions not specified
• Juniper Secure Access 6500: affected versions not specified
• Juniper Secure Access 700: affected versions not specified
• Juniper Secure Access Virtual Appliance: affected versions not specified

Published 2013-08-01. Last modified 2026-06-16.