Juniper Networks Junos Space

• CVE-2026-21904 Medium 6.1 Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection 0.2%
• CVE-2026-21907 Medium 5.9 Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) 0.2%
• CVE-2025-60009 Medium 6.1 Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-60002 Medium 6.1 Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-60001 Medium 6.1 Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection 0.4%
• CVE-2025-60000 Medium 6.1 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59999 Medium 6.1 Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59998 Medium 6.1 Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59997 Medium 6.1 Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59996 Medium 6.1 Junos Space: Configuration View page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59995 Medium 6.1 Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59994 Medium 6.1 Junos Space: Quick Template page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59993 Medium 6.1 Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59992 Medium 6.1 Junos Space: Secure Console page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59991 Medium 6.1 Junos Space: Device Management pages are vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59990 Medium 6.1 Junos Space: Template creation pages are vulnerable to reflected cross-site script injection 0.4%
• CVE-2025-59989 Medium 6.1 Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59988 Medium 6.1 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection 0.4%
• CVE-2025-59987 Medium 6.1 Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59986 Medium 6.1 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59985 Medium 6.1 Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection 0.2%
• CVE-2025-59984 Medium 6.1 Junos Space: Global Search is vulnerable to reflected cross-site script injection 0.4%
• CVE-2025-59983 Medium 6.1 Junos Space: Template Definition page is vulnerable to reflected cross-site script injection 0.3%
• CVE-2025-59982 Medium 6.1 Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection 0.3%
• CVE-2025-59981 Medium 6.1 Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection 0.3%
• CVE-2025-59978 Critical 9.0 Junos Space: Stored cross-site scripting vulnerability in web application 0.5%
• CVE-2025-59976 Medium 6.5 Junos Space: Arbitrary file download vulnerability in web interface 0.3%
• CVE-2025-59975 High 7.5 Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS 0.4%
• CVE-2024-39563 High 7.3 Junos Space: Remote Command Execution (RCE) vulnerability in web application 1.3%
• CVE-2021-0220 Medium 6.8 Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI 1.2%
• CVE-2020-1652 Medium 5.6 Junos Space: OpenNMS is accessible via port 9443 0.7%
• CVE-2020-1611 Medium 6.5 Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device. 1.7%