CVE-2012-1038 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 1.6% (pctl 75)
Patch early
A public exploit exists.
Description
Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobility System Software (MSS) 7.6.x before 7.6.3, 7.7.x before 7.7.1, 7.5.x before 7.5.3, and other unspecified versions before 7.4 and 7.3 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter name.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| EPSS | 1.62% — more likely to be exploited than 75% of all CVEs |
| Weakness | CWE-79 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2013-04-03 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| juniper | networks mobility system software |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Juniper Networks Mobility System Software - '/aaa/wba_login.html' Cross-Site Scripting | 2012-06-14 |
References
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view
- http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf
- http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/
- http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2012-06-611&viewMode=view
- http://www.secureworks.com/advisories/swrx-2012-004/SWRX-2012-004.pdf
- http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2012-004/
→ the Explorer · watch your stack · NVD