JS
Product
Junos Space
79
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 12Medium 41Low 0
Watch
Add Junos Space to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-0220 | 6.8 | Jan 15 | The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 2.0; +25 more |
| CVE-2025-59976 | 6.5 | Oct 9 | An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access… Affected: before 24.1; 24.1; 24.1 |
| CVE-2020-1611 | 6.5 | Jan 15 | A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets Affected: 17.1; 17.2; 18.1; 18.2; 18.3; 18.4; +3 more |
| CVE-2019-0016 | 6.5 | Jan 15 | Junos Space: Authenticated user able to delete devices without delete device privileges Affected: 13.3; 13.3; 13.3; 13.3; 14.1; 14.1; +17 more |
| CVE-2018-0013 | 6.5 | Jan 10 | A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system Affected: All versions, or not specified |
| CVE-2018-0010 | 6.5 | Jan 10 | A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to… Affected: 13.3; 13.3; 14.1; 14.1; 14.1; 15.1; +10 more |
| CVE-2017-2308 | 6.5 | May 30 | An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device Affected: through 16.1 |
| CVE-2016-4931 | 6.5 | Mar 20 | XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service Affected: through 15.2 |
| CVE-2026-21904 | 6.1 | Apr 9 | Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 2.0; +34 more |
| CVE-2025-60009 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60002 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60001 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-60000 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59999 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59998 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59997 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59996 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59995 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59994 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59993 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59992 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59991 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59990 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59989 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59988 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59987 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59986 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59985 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in a… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59984 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59983 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59982 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2025-59981 | 6.1 | Oct 9 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in… Affected: before 24.1; 24.1; 24.1; 24.1 |
| CVE-2018-0046 | 6.1 | Oct 10 | A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from… Affected: 18.1r1 |
| CVE-2017-2307 | 6.1 | May 30 | A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal… Affected: through 15.2 |
| CVE-2016-4930 | 6.1 | Mar 20 | Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions Affected: through 15.2 |
| CVE-2026-21907 | 5.9 | Jan 15 | Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) Affected: before 24.1; 24.1; 24.1; 24.1; 24.1 |
| CVE-2017-2309 | 5.9 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible… Affected: through 16.1 |
| CVE-2018-0047 | 5.4 | Oct 10 | A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts Affected: 13.3; 13.3; 14.1; 14.1; 14.1; 15.1; +10 more |
| CVE-2018-0011 | 5.4 | Jan 10 | A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and… Affected: 13.3; 13.3; 13.3; 14.1; 14.1; 14.1; +9 more |
| CVE-2017-2311 | 5.3 | May 30 | On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service… Affected: through 16.1 |
| CVE-2017-2310 | 5.3 | May 30 | A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network… Affected: through 15.2 |
Showing 41