# Juniper Networks Junos Space.

Every CVE that names Juniper Networks Junos Space among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2026-21904.md)
  `CVE-2026-21904` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)](https://agentprime.io/advisories/CVE-2026-21907.md)
  `CVE-2026-21907` · CVE record: Juniper Networks Junos Space · CVSS 8.2 High · Not analysed yet · Published 15 Jan 2026 · Tags: Weak cryptography or TLS
- [Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-60009.md)
  `CVE-2025-60009` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-60002.md)
  `CVE-2025-60002` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-60001.md)
  `CVE-2025-60001` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Generate Report page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-60000.md)
  `CVE-2025-60000` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59999.md)
  `CVE-2025-59999` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59998.md)
  `CVE-2025-59998` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59997.md)
  `CVE-2025-59997` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Configuration View page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59996.md)
  `CVE-2025-59996` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59995.md)
  `CVE-2025-59995` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Quick Template page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59994.md)
  `CVE-2025-59994` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59993.md)
  `CVE-2025-59993` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Secure Console page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59992.md)
  `CVE-2025-59992` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Device Management pages are vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59991.md)
  `CVE-2025-59991` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Template creation pages are vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59990.md)
  `CVE-2025-59990` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59989.md)
  `CVE-2025-59989` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Generate Report page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59988.md)
  `CVE-2025-59988` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59987.md)
  `CVE-2025-59987` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59986.md)
  `CVE-2025-59986` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59985.md)
  `CVE-2025-59985` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Global Search is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59984.md)
  `CVE-2025-59984` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Template Definition page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59983.md)
  `CVE-2025-59983` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59982.md)
  `CVE-2025-59982` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection](https://agentprime.io/advisories/CVE-2025-59981.md)
  `CVE-2025-59981` · CVE record: Juniper Networks Junos Space · CVSS 5.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Stored cross-site scripting vulnerability in web application](https://agentprime.io/advisories/CVE-2025-59978.md)
  `CVE-2025-59978` · CVE record: Juniper Networks Junos Space · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site scripting (XSS)
- [Junos Space: Arbitrary file download vulnerability in web interface](https://agentprime.io/advisories/CVE-2025-59976.md)
  `CVE-2025-59976` · CVE record: Juniper Networks Junos Space · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2025 · Tags: Information disclosure
- [Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS](https://agentprime.io/advisories/CVE-2025-59975.md)
  `CVE-2025-59975` · CVE record: Juniper Networks Junos Space · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: Denial of service
- [Junos Space: Remote Command Execution (RCE) vulnerability in web application](https://agentprime.io/advisories/CVE-2024-39563.md)
  `CVE-2024-39563` · CVE record: Juniper Networks Junos Space · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: Command injection
- [Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI](https://agentprime.io/advisories/CVE-2021-0220.md)
  `CVE-2021-0220` · CVE record: Juniper Networks Junos Space · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-257
- [Junos Space: OpenNMS is accessible via port 9443](https://agentprime.io/advisories/CVE-2020-1652.md)
  `CVE-2020-1652` · CVE record: Juniper Networks Junos Space · CVSS 5.6 Medium · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-213
- [Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.](https://agentprime.io/advisories/CVE-2020-1611.md)
  `CVE-2020-1611` · CVE record: Juniper Networks Junos Space · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2020
- [Junos Space: Unrestricted file upload vulnerability](https://agentprime.io/advisories/CVE-2019-0017.md)
  `CVE-2019-0017` · CVE record: Juniper Networks Junos Space · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos Space: Authenticated user able to delete devices without delete device privileges](https://agentprime.io/advisories/CVE-2019-0016.md)
  `CVE-2019-0016` · CVE record: Juniper Networks Junos Space · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS](https://agentprime.io/advisories/CVE-2018-0046.md)
  `CVE-2018-0046` · CVE record: Juniper Networks Junos Space · CVSS 8.8 High · Not analysed yet · Published 10 Oct 2018
- [Junos Space: Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2018-0013.md)
  `CVE-2018-0013` · CVE record: Juniper Networks Junos Space · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2018
- [Junos Space: Local privilege escalation vulnerability in Junos Space](https://agentprime.io/advisories/CVE-2018-0012.md)
  `CVE-2018-0012` · CVE record: Juniper Networks Junos Space · CVSS 7.8 High · Not analysed yet · Published 10 Jan 2018
- [Junos Space: Reflected XSS vulnerability in Junos Space management interface](https://agentprime.io/advisories/CVE-2018-0011.md)
  `CVE-2018-0011` · CVE record: Juniper Networks Junos Space · CVSS 5.4 Medium · Not analysed yet · Published 10 Jan 2018
- [Junos Space: Insufficient verification of node certificates.](https://agentprime.io/advisories/CVE-2017-10624.md)
  `CVE-2017-10624` · CVE record: Juniper Networks Junos Space · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [Junos Space: Insufficient verification of cluster messages](https://agentprime.io/advisories/CVE-2017-10623.md)
  `CVE-2017-10623` · CVE record: Juniper Networks Junos Space · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2017
- [Junos Space: Authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2017-10622.md)
  `CVE-2017-10622` · CVE record: Juniper Networks Junos Space · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2017
- [Junos Space: Persistent Cross site scripting in Junos Space](https://agentprime.io/advisories/CVE-2017-10612.md)
  `CVE-2017-10612` · CVE record: Juniper Networks Junos Space · CVSS 8.0 High · Not analysed yet · Published 13 Oct 2017
- [Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…](https://agentprime.io/advisories/CVE-2017-2311.md)
  `CVE-2017-2311` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos…](https://agentprime.io/advisories/CVE-2017-2310.md)
  `CVE-2017-2310` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based…](https://agentprime.io/advisories/CVE-2017-2309.md)
  `CVE-2017-2309` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions…](https://agentprime.io/advisories/CVE-2017-2308.md)
  `CVE-2017-2308` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: A reflected cross site scripting vulnerability in the administrative interface of Juniper…](https://agentprime.io/advisories/CVE-2017-2307.md)
  `CVE-2017-2307` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…](https://agentprime.io/advisories/CVE-2017-2306.md)
  `CVE-2017-2306` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017
- [Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…](https://agentprime.io/advisories/CVE-2017-2305.md)
  `CVE-2017-2305` · CVE record: Juniper Networks Junos Space · No CVSS score · Not analysed yet · Published 30 May 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-space>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-space/>. Everything for agents: <https://agentprime.io/llms.txt>.