CVE:CVE-2010-2288
CNNVD:CNNVD-201006-248
Juniper Networks IVE 6.5R1 (Build 14599) 和6.5R2 (Build 14951)存在跨站脚本攻击漏洞。远程攻击者可以借助DSSignInURL注入任意web脚本和HTML。
solution:Upgrade juniper secure_access to a higher version than 6.5:r1.0,6.5:r2.0,and avoid the version 6.5:r1.0,6.5:r2.0