Juniper Networks Junos Space
49 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-21904 | < 24.1R5 Patch V3 | Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2026-21907 | < 24.1R5 | Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) | HIGH 8.2 | 0.2 % | ||
| CVE-2025-60009 | < 24.1R4 | Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-60002 | < 24.1R4 | Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-60001 | < 24.1R4 | Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-60000 | < 24.1R4 | Junos Space: Generate Report page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59999 | < 24.1R4 | Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59998 | < 24.1R4 | Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59997 | < 24.1R4 | Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59996 | < 24.1R4 | Junos Space: Configuration View page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59995 | < 24.1R4 | Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59994 | < 24.1R4 | Junos Space: Quick Template page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59993 | < 24.1R4 | Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59992 | < 24.1R4 | Junos Space: Secure Console page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59991 | < 24.1R4 | Junos Space: Device Management pages are vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59990 | < 24.1R4 | Junos Space: Template creation pages are vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-59989 | < 24.1R4 | Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59988 | < 24.1R4 | Junos Space: Generate Report page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-59987 | < 24.1R4 | Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59986 | < 24.1R4 | Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59985 | < 24.1R4 | Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-59984 | < 24.1R4 | Junos Space: Global Search is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-59983 | < 24.1R4 | Junos Space: Template Definition page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.3 % | ||
| CVE-2025-59982 | < 24.1R4 | Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.3 % | ||
| CVE-2025-59981 | < 24.1R4 | Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection | MEDIUM 5.1 | 0.3 % | ||
| CVE-2025-59978 | < 24.1R4 | Junos Space: Stored cross-site scripting vulnerability in web application | CRITICAL 9.4 | 0.5 % | ||
| CVE-2025-59976 | < 24.1R3 | Junos Space: Arbitrary file download vulnerability in web interface | HIGH 7.1 | 0.3 % | ||
| CVE-2025-59975 | < 22.2R1 Patch V3 ; 23.1 – < 23.1R1 Patch V3 | Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS | HIGH 8.7 | 0.4 % | ||
| CVE-2024-39563 | 24.1R1 | Junos Space: Remote Command Execution (RCE) vulnerability in web application | MEDIUM 6.9 | 1.3 % | ||
| CVE-2021-0220 | unspecified – < 20.3R1 | Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI | MEDIUM 6.8 | 1.2 % | ||
| CVE-2020-1652 | 20.1 – < 20.1R1 | Junos Space: OpenNMS is accessible via port 9443 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2020-1611 | unspecified – < 19.4R1 | Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device. | MEDIUM 6.5 | 1.7 % | ||
| CVE-2019-0017 | unspecified – < 18.3R1 | Junos Space: Unrestricted file upload vulnerability | HIGH 8.8 | 1.1 % | ||
| CVE-2019-0016 | unspecified – < 18.3R1 | Junos Space: Authenticated user able to delete devices without delete device privileges | MEDIUM 6.5 | 0.9 % | ||
| CVE-2018-0046 | unspecified – < 18.2R1 | Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS | HIGH 8.8 | 1.6 % | ||
| CVE-2018-0013 | all – < 17.2R1 | Junos Space: Local File Inclusion Vulnerability | MEDIUM 6.5 | 1.2 % | ||
| CVE-2018-0012 | All – < 17.2R1 | Junos Space: Local privilege escalation vulnerability in Junos Space | HIGH 7.8 | 0.3 % | ||
| CVE-2018-0011 | All – < 17.2R1 | Junos Space: Reflected XSS vulnerability in Junos Space management interface | MEDIUM 5.4 | 0.8 % | ||
| CVE-2017-10624 | versions prior to 17.1R1 | Junos Space: Insufficient verification of node certificates. | HIGH 7.5 | 0.4 % | ||
| CVE-2017-10623 | versions prior to 17.1R1 | Junos Space: Insufficient verification of cluster messages | HIGH 8.1 | 0.9 % | ||
| CVE-2017-10622 | 17.1R1 without Patch-v1 ; 16.1 releases prior to 16.1R3 | Junos Space: Authentication bypass vulnerability | CRITICAL 9.8 | 5.4 % | ||
| CVE-2017-10612 | versions prior to 17.1R1 | Junos Space: Persistent Cross site scripting in Junos Space | HIGH 8.0 | 1.3 % | ||
| CVE-2017-2311 | versions prior to 16.1R1 | On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can e | MEDIUM 5.3 | 1.3 % | ||
| CVE-2017-2310 | versions prior to 16.1R1 | A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain craft | MEDIUM 5.3 | 1.2 % | ||
| CVE-2017-2309 | versions prior to 16.1R1 | On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some | MEDIUM 5.9 | 0.8 % | ||
| CVE-2017-2308 | versions prior to 16.1R1 | An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to r | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-2307 | versions prior to 16.1R1 | A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-2306 | versions prior to 16.1R1 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi | HIGH 8.8 | 1.6 % | ||
| CVE-2017-2305 | versions prior to 16.1R1 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi | HIGH 8.8 | 1.1 % |