Juniper Secure Access 2500 vulnerabilities

2 CVEs affecting Juniper Secure Access 2500, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3812, published 2014-06-13.

More from Juniper.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-5460, published 2013-08-01. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject…
• CVE-2014-3812, published 2014-06-13. Medium severity, CVSS 5.0. EPSS: 0.7% chance of exploitation in the next 30 days. The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable…