CVE:CVE-2014-3820
CNNVD:CNNVD-201409-992
Juniper Networks Junos Pulse Secure Access Service（SSL VPN）和Junos Pulse Access Control Service（UAC，统一接入控制）都是美国瞻博网络（Juniper Networks）公司的产品。前者是一款支持远程和移动用户用各种Web设备访问企业资源的客户端。后者是一套基于标准、可扩展的网络接入控制解决方案。
Juniper Networks Juniper Junos Pulse Secure Access Service (SSL VPN)设备with IVE OS和Pulse Access Control Service设备with UAC OS 中的SSL VPN/UAC Web服务器存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。以下产品和版本受到影响：Juniper Junos Pulse Secure Access Service (SSL VPN) 7.1r16之前7.1版本，7.4r3之前7.4版本，8.0r1之前8.0版本和Juniper Junos Pulse Access Control Service 4.1r8之前4.1版本，4.4r3之前4.4版本，5.0r1之前5.0版本。
solution:Upgrade juniper junos_pulse_access_control_service to a higher version than 4.1,4.1r1,4.1r1.1,4.1r2,4.1r3,4.1r4,4.1r5,4.4,4.4:r1,4.4:r2,5.0,and avoid the version 4.1,4.1r1,4.1r1.1,4.1r2,4.1r3,4.1r4,4.1r5,4.4,4.4:r1,4.4:r2,5.0; Upgrade juniper junos_pulse_secure_access_service to a higher version than 7.1,7.1r1,7.1r1.1,7.1r2,7.1r3,7.1r4,7.1r5,7.1r6,7.1r7,7.1r8,7.1r9,7.1r10,7.1r11,7.1r12,7.1r13,7.1r14,7.1r15,7.4,7.4:r1.0,7.4:r2.0,8.0,and avoid the version 7.1,7.1r1,7.1r1.1,7.1r2,7.1r3,7.1r4,7.1r5,7.1r6,7.1r7,7.1r8,7.1r9,7.1r10,7.1r11,7.1r12,7.1r13,7.1r14,7.1r15,7.4,7.4:r1.0,7.4:r2.0,8.0