JS
Product
Junos Space
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 41Low 0
Watch
Add Junos Space to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0017 | 8.8 | Jan 15 | Junos Space: Unrestricted file upload vulnerability Affected: 13.3; 13.3; 13.3; 13.3; 14.1; 14.1; +17 more |
| CVE-2017-2306 | 8.8 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute… Affected: through 16.1 |
| CVE-2017-2305 | 8.8 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create… Affected: through 16.1 |
| CVE-2016-4929 | 8.8 | Mar 20 | Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user Affected: through 15.2 |
| CVE-2016-4928 | 8.8 | Mar 20 | Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space Affected: through 15.2 |
| CVE-2017-10623 | 8.1 | Oct 13 | Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos… Affected: through 16.2 |
| CVE-2016-4927 | 8.1 | Mar 20 | Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices Affected: through 15.2 |
| CVE-2017-10612 | 8.0 | Oct 13 | A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be… Affected: through 16.1r3 |
| CVE-2018-0012 | 7.8 | Jan 10 | Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges Affected: through 17.2 |
| CVE-2025-59975 | 7.5 | Oct 9 | An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device… Affected: before 22.2; 22.2; 23.1 |
| CVE-2017-10624 | 7.5 | Oct 13 | Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database… Affected: through 16.1 |
| CVE-2024-39563 | 7.3 | Oct 11 | A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell… Affected: 24.1 |
Showing 12
