{"id":"CVE-2014-3823","aliases":["EUVD-2014-3761","GHSA-x6pp-j24v-837c"],"status":"published","title":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4...","description":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00958,"percentile":0.61714,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-09-29T14:00:00Z","modified":"2026-06-17T00:08:58Z","products":[{"vendor":"juniper","product":"junos_pulse_secure_access_service"}],"references":[{"url":"https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10647","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3823"},{"url":"https://github.com/advisories/GHSA-x6pp-j24v-837c"}],"sources":{"cve":[{"id":"CVE-2014-3823","description":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2014-09-29T14:00:00Z","modified":"2024-08-06T10:57:17.223Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3761","description":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2014-09-29T14:00:00Z","modified":"2024-08-06T10:57:17Z","updated_at":"2026-11-03T01:57:09.370988Z"}],"ghsa":[{"id":"GHSA-x6pp-j24v-837c","title":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4...","description":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2022-05-17T04:32:24Z","modified":"2023-01-28T05:02:02Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:41.660281Z"}],"nvd":[{"id":"CVE-2014-3823","description":"The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18 allows remote attackers to conduct clickjacking attacks via unspecified vectors.","status":"published","published":"2014-09-29T14:55:08.767Z","modified":"2026-06-17T00:08:58.743Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:56.266125Z"}]}}