CVE-2015-7322: juniper pulse_connect_secure
Vulnerability summary
CVE-2015-7322 is a medium (CVSS 5.0) vulnerability in juniper pulse_connect_secure. EPSS estimates a 2.32% chance of exploitation in the next 30 days, higher than 83.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 05-10-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts to join a meeting depending on the status of the meeting, which allows remote attackers to enumerate valid meeting ids via a series of requests.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.32%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.32% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (profundis-labs.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Juniper1 product
- pulse_connect_secure7.1 | 7.4 | 8.0 | 8.1
1 vendor · 1 product