JS
Product
Junos Space
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 41Low 0
Watch
Add Junos Space to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-3413 | 9.8 | Apr 5 | The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive… Affected: 13.3; 13.3; 13.3; 13.3; 13.3; 13.3; +1 more |
| CVE-2017-10622 | 9.8 | Oct 13 | An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any… Affected: 17.1; 16.1; 16.1; 16.1 |
| CVE-2016-1265 | 9.8 | Oct 13 | A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross… Affected: through 15.1r2 |
| CVE-2016-4926 | 9.8 | Mar 20 | Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative… Affected: through 15.2 |
| CVE-2025-59978 | 9.0 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2019-0017 | 8.8 | Jan 15 | Junos Space: Unrestricted file upload vulnerability Affected: 13.3; 13.3; 13.3; 13.3; 14.1; 14.1; +17 more |
| CVE-2017-2306 | 8.8 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute… Affected: through 16.1 |
| CVE-2017-2305 | 8.8 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create… Affected: through 16.1 |
| CVE-2016-4929 | 8.8 | Mar 20 | Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user Affected: through 15.2 |
| CVE-2016-4928 | 8.8 | Mar 20 | Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space Affected: through 15.2 |
| CVE-2017-10623 | 8.1 | Oct 13 | Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos… Affected: through 16.2 |
| CVE-2016-4927 | 8.1 | Mar 20 | Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices Affected: through 15.2 |
| CVE-2017-10612 | 8.0 | Oct 13 | A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be… Affected: through 16.1r3 |
| CVE-2018-0012 | 7.8 | Jan 10 | Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges Affected: through 17.2 |
| CVE-2025-59975 | 7.5 | Oct 9 | An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device… Affected: before 22.2; 22.2; 23.1 |
| CVE-2017-10624 | 7.5 | Oct 13 | Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database… Affected: through 16.1 |
| CVE-2024-39563 | 7.3 | Oct 11 | A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell… Affected: 24.1 |
| CVE-2021-0220 | 6.8 | Jan 15 | The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 2.0; +25 more |
| CVE-2025-59976 | 6.5 | Oct 9 | An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access… Affected: before 24.1; 24.1; 24.1 |
| CVE-2020-1611 | 6.5 | Jan 15 | A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets Affected: 17.1; 17.2; 18.1; 18.2; 18.3; 18.4; +3 more |
| CVE-2019-0016 | 6.5 | Jan 15 | Junos Space: Authenticated user able to delete devices without delete device privileges Affected: 13.3; 13.3; 13.3; 13.3; 14.1; 14.1; +17 more |
| CVE-2018-0013 | 6.5 | Jan 10 | A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system Affected: All versions, or not specified |
| CVE-2018-0010 | 6.5 | Jan 10 | A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to… Affected: 13.3; 13.3; 14.1; 14.1; 14.1; 15.1; +10 more |
| CVE-2017-2308 | 6.5 | May 30 | An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device Affected: through 16.1 |
| CVE-2016-4931 | 6.5 | Mar 20 | XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service Affected: through 15.2 |
| CVE-2026-21904 | 6.1 | Apr 9 | Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 2.0; +34 more |
| CVE-2025-60009 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60002 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60001 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60000 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59999 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59998 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59997 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59996 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59995 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59994 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59993 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59992 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59991 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59990 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59989 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59988 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59987 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59986 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59985 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in a… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59984 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59983 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59982 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59981 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2018-0046 | 6.1 | Oct 10 | A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from… Affected: 18.1r1 |