CVE-2013-5095

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 16, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-50964.0Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access coCVE-2013-50974.0Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list ofCVE-2013-50984.3Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackCVE-2013-50992.6Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arCVE-2013-51004.3Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackerCVE-2013-51068.8A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.CVE-2013-51075.0Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the RCVE-2013-51084.3Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitCVE-2013-51124.6Evernote before 5.5.1 has insecure PIN storageCVE-2013-51136.8LastPass prior to 2.5.1 has an insecure PIN implementation.CVE-2013-51146.1LastPass prior to 2.5.1 allows secure wipe bypass.CVE-2013-51167.1Evernote prior to 5.5.1 has insecure password change
CVE-2013-5095: Medium severity, CVSS 4.3 | Vulnix