Juniper Junos Pulse Access Control Service vulnerabilities

3 CVEs affecting Juniper Junos Pulse Access Control Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3820, published 2014-09-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5650, published 2013-09-16. Medium severity, CVSS 5.4. EPSS: 1.8% chance of exploitation in the next 30 days. Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5,…
CVE-2014-3820, published 2014-09-29. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0…
CVE-2013-3970, published 2013-06-13. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5…