CVE-2010-2289: Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 (Build 14599) and 6.5R2...

Security readout for executives and security teams

This issue lets an attacker abuse a Juniper IVE login portal as a trusted-looking redirector to send users to another website. The main business risk is phishing: users may see a legitimate Juniper URL first, then land on an attacker-controlled site. The sources do not show active exploitation or a CVSS score. Exposure is most likely in organizations still running Juniper Networks IVE 6.5R1 Build 14599 or 6.5R2 Build 14951, especially internet-facing VPN or secure access portals. Evidence for other versions is not provided in the source bundle. Handle as a targeted phishing enabler on legacy remote-access infrastructure. It is not sourced as actively exploited, but VPN portals are high-trust assets. Prioritize confirmation and vendor-guided remediation if affected builds are still present. Mitigation focus: Inventory Juniper IVE appliances and record exact software versions and builds.; Check Juniper PSN-2010-05-751 for the vendor-supported remediation path.; Prioritize remediation for internet-facing VPN or secure access portals..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.