JS
Product
Junos Space
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 41Low 0
Watch
Add Junos Space to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2307 | 6.1 | May 30 | A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal… Affected: through 15.2 |
| CVE-2016-4930 | 6.1 | Mar 20 | Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions Affected: through 15.2 |
| CVE-2026-21907 | 5.9 | Jan 15 | Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) Affected: before 24.1; 24.1; 24.1; 24.1; 24.1 |
| CVE-2017-2309 | 5.9 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible… Affected: through 16.1 |
| CVE-2018-0047 | 5.4 | Oct 10 | A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts Affected: 13.3; 13.3; 14.1; 14.1; 14.1; 15.1; +10 more |
| CVE-2018-0011 | 5.4 | Jan 10 | A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and… Affected: 13.3; 13.3; 13.3; 14.1; 14.1; 14.1; +9 more |
| CVE-2017-2311 | 5.3 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service… Affected: through 16.1 |
| CVE-2017-2310 | 5.3 | May 30 | A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network… Affected: through 15.2 |
| CVE-2015-2620 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: through 15.1 |
| CVE-2015-3209 | – | Jun 15 | Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted… Affected: through 15.1 |
| CVE-2015-0501 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related… Affected: through 15.1 |
| CVE-2014-6559 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL… Affected: through 15.1 |
| CVE-2014-6500 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via… Affected: through 15.1 |
| CVE-2014-6496 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: through 15.1 |
| CVE-2014-6495 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL Affected: through 15.1 |
| CVE-2014-6494 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: through 15.1 |
| CVE-2014-6491 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via… Affected: through 15.1 |
| CVE-2014-6478 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL Affected: through 15.1 |
| CVE-2014-3412 | – | May 20 | Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors Affected: through 13.1; 1.0; 1.1; 1.2; 1.3; 1.4; +8 more |
| CVE-2014-2421 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and… Affected: before 15.1 |
| CVE-2014-0460 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and… Affected: before 15.1 |
| CVE-2014-0457 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality,… Affected: before 15.1 |
| CVE-2014-0456 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via… Affected: before 15.1 |
| CVE-2014-0453 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and… Affected: before 15.1 |
| CVE-2014-0429 | – | Apr 16 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality,… Affected: before 15.1 |
| CVE-2013-5097 | – | Aug 16 | Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password… Affected: 11.1; 11.2; 11.3; 11.4; 12.1; 12.2; +1 more |
| CVE-2013-5096 | – | Aug 16 | Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote… Affected: 11.1; 11.2; 11.3; 11.4; 12.1; 12.2; +1 more |
| CVE-2013-5095 | – | Aug 16 | Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote… Affected: 11.1; 11.2; 11.3; 11.4; 12.1; 12.2; +1 more |
| CVE-2013-3497 | – | May 8 | Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for… Affected: through 12.3; 1.0; 1.1; 1.2; 1.3; 1.4; +7 more |