JS
Product
Junos Space
31
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 27Low 0
Watch
Add Junos Space to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59978 | 9.0 | Oct 9 | Junos Space: Stored cross-site scripting vulnerability in web application Affected: before 24.1R4 |
| CVE-2019-0017 | 8.8 | Jan 15 | Junos Space: Unrestricted file upload vulnerability Affected: before 18.3R1 |
| CVE-2025-59975 | 7.5 | Oct 9 | Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS Affected: before 22.2R1 Patch V3; 23.1 before 23.1R1 Patch V3 |
| CVE-2024-39563 | 7.3 | Oct 11 | Junos Space: Remote Command Execution (RCE) vulnerability in web application Affected: 24.1R1 |
| CVE-2025-59976 | 6.5 | Oct 9 | Junos Space: Arbitrary file download vulnerability in web interface Affected: before 24.1R3 |
| CVE-2019-0016 | 6.5 | Jan 15 | Junos Space: Authenticated user able to delete devices without delete device privileges Affected: before 18.3R1 |
| CVE-2026-21904 | 6.1 | Apr 9 | Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection Affected: before 24.1R5 Patch V3 |
| CVE-2025-60009 | 6.1 | Oct 9 | Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-60002 | 6.1 | Oct 9 | Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-60001 | 6.1 | Oct 9 | Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-60000 | 6.1 | Oct 9 | Junos Space: Generate Report page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59999 | 6.1 | Oct 9 | Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59998 | 6.1 | Oct 9 | Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59997 | 6.1 | Oct 9 | Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59996 | 6.1 | Oct 9 | Junos Space: Configuration View page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59995 | 6.1 | Oct 9 | Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59994 | 6.1 | Oct 9 | Junos Space: Quick Template page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59993 | 6.1 | Oct 9 | Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59992 | 6.1 | Oct 9 | Junos Space: Secure Console page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59991 | 6.1 | Oct 9 | Junos Space: Device Management pages are vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59990 | 6.1 | Oct 9 | Junos Space: Template creation pages are vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59989 | 6.1 | Oct 9 | Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59988 | 6.1 | Oct 9 | Junos Space: Generate Report page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59987 | 6.1 | Oct 9 | Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59986 | 6.1 | Oct 9 | Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59985 | 6.1 | Oct 9 | Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59984 | 6.1 | Oct 9 | Junos Space: Global Search is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59983 | 6.1 | Oct 9 | Junos Space: Template Definition page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59982 | 6.1 | Oct 9 | Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2025-59981 | 6.1 | Oct 9 | Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection Affected: before 24.1R4 |
| CVE-2026-21907 | 5.9 | Jan 15 | Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) Affected: before 24.1R5 |
Showing 31