CVE-2014-2291: Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper...

Security readout for executives and security teams

This CVE is an authenticated cross-site scripting issue in Juniper Junos Pulse Secure Access Service SSL VPN, specifically Pulse Collaboration Secure Meeting user pages. A logged-in remote user could inject script or HTML into affected pages. The sources do not provide a CVSS score or evidence of active exploitation. Exposure is limited to organizations still running the named Juniper SSL VPN IVE OS versions and using Pulse Collaboration or Secure Meeting user pages. Internet-facing SSL VPN appliances increase business relevance, but the cited sources do not quantify prevalence or default exposure. Handle as a maintenance-priority SSL VPN issue unless local exposure is high. Urgency rises for internet-facing appliances, broad authenticated user populations, or environments where SSL VPN sessions carry privileged business access. Mitigation focus: Upgrade affected IVE OS branches to the fixed release or later for that branch.; Review Juniper JSA10617 for vendor-specific remediation details.; Prioritize internet-facing SSL VPN appliances in upgrade planning..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.