Advisories · Technology

Juniper Networks Junos Space.

Every CVE that names Juniper Networks Junos Space among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21904 CVE record

CVSS 5.1 Medium

Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2026
CVE-2026-21907 CVE record

CVSS 8.2 High

Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)
- Juniper Networks Junos Space
- Weak cryptography or TLS
Not analysed yet 15 Jan 2026
CVE-2025-60009 CVE record

CVSS 5.1 Medium

Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-60002 CVE record

CVSS 5.1 Medium

Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-60001 CVE record

CVSS 5.1 Medium

Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-60000 CVE record

CVSS 5.1 Medium

Junos Space: Generate Report page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59999 CVE record

CVSS 5.1 Medium

Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59998 CVE record

CVSS 5.1 Medium

Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59997 CVE record

CVSS 5.1 Medium

Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59996 CVE record

CVSS 5.1 Medium

Junos Space: Configuration View page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59995 CVE record

CVSS 5.1 Medium

Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59994 CVE record

CVSS 5.1 Medium

Junos Space: Quick Template page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59993 CVE record

CVSS 5.1 Medium

Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59992 CVE record

CVSS 5.1 Medium

Junos Space: Secure Console page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59991 CVE record

CVSS 5.1 Medium

Junos Space: Device Management pages are vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59990 CVE record

CVSS 5.1 Medium

Junos Space: Template creation pages are vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59989 CVE record

CVSS 5.1 Medium

Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59988 CVE record

CVSS 5.1 Medium

Junos Space: Generate Report page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59987 CVE record

CVSS 5.1 Medium

Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59986 CVE record

CVSS 5.1 Medium

Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59985 CVE record

CVSS 5.1 Medium

Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59984 CVE record

CVSS 5.1 Medium

Junos Space: Global Search is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59983 CVE record

CVSS 5.1 Medium

Junos Space: Template Definition page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59982 CVE record

CVSS 5.1 Medium

Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59981 CVE record

CVSS 5.1 Medium

Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59978 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Junos Space: Stored cross-site scripting vulnerability in web application
- Juniper Networks Junos Space
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-59976 CVE record

CVSS 7.1 High

Junos Space: Arbitrary file download vulnerability in web interface
- Juniper Networks Junos Space
- Information disclosure
Not analysed yet 9 Oct 2025
CVE-2025-59975 CVE record

CVSS 8.7 High

Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS
- Juniper Networks Junos Space
- Denial of service
Not analysed yet 9 Oct 2025
CVE-2024-39563 CVE record

CVSS 6.9 Medium

Junos Space: Remote Command Execution (RCE) vulnerability in web application
- Juniper Networks Junos Space
- Command injection
Not analysed yet 11 Oct 2024
CVE-2021-0220 CVE record

CVSS 6.8 Medium

Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
- Juniper Networks Junos Space
- CWE-257
Not analysed yet 15 Jan 2021
CVE-2020-1652 CVE record

CVSS 5.6 Medium

Junos Space: OpenNMS is accessible via port 9443
- Juniper Networks Junos Space
- CWE-213
Not analysed yet 17 Jul 2020
CVE-2020-1611 CVE record

CVSS 6.5 Medium

Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.
- Juniper Networks Junos Space
Not analysed yet 15 Jan 2020
CVE-2019-0017 CVE record

CVSS 6.5 Medium

Junos Space: Unrestricted file upload vulnerability
- Juniper Networks Junos Space
Not analysed yet 15 Jan 2019
CVE-2019-0016 CVE record

CVSS 6.5 Medium

Junos Space: Authenticated user able to delete devices without delete device privileges
- Juniper Networks Junos Space
Not analysed yet 15 Jan 2019
CVE-2018-0046 CVE record

CVSS 8.8 High

Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS
- Juniper Networks Junos Space
Not analysed yet 10 Oct 2018
CVE-2018-0013 CVE record

CVSS 6.5 Medium

Junos Space: Local File Inclusion Vulnerability
- Juniper Networks Junos Space
Not analysed yet 10 Jan 2018
CVE-2018-0012 CVE record

CVSS 7.8 High

Junos Space: Local privilege escalation vulnerability in Junos Space
- Juniper Networks Junos Space
Not analysed yet 10 Jan 2018
CVE-2018-0011 CVE record

CVSS 5.4 Medium

Junos Space: Reflected XSS vulnerability in Junos Space management interface
- Juniper Networks Junos Space
Not analysed yet 10 Jan 2018
CVE-2017-10624 CVE record

CVSS 7.5 High

Junos Space: Insufficient verification of node certificates.
- Juniper Networks Junos Space
Not analysed yet 13 Oct 2017
CVE-2017-10623 CVE record

CVSS 7.1 High

Junos Space: Insufficient verification of cluster messages
- Juniper Networks Junos Space
Not analysed yet 13 Oct 2017
CVE-2017-10622 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos Space: Authentication bypass vulnerability
- Juniper Networks Junos Space
Not analysed yet 13 Oct 2017
CVE-2017-10612 CVE record

CVSS 8.0 High

Junos Space: Persistent Cross site scripting in Junos Space
- Juniper Networks Junos Space
Not analysed yet 13 Oct 2017
CVE-2017-2311 CVE record

Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2310 CVE record

Juniper Networks Junos Space: A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2309 CVE record

Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2308 CVE record

Juniper Networks Junos Space: An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2307 CVE record

Juniper Networks Junos Space: A reflected cross site scripting vulnerability in the administrative interface of Juniper…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2306 CVE record

Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017
CVE-2017-2305 CVE record

Juniper Networks Junos Space: On Juniper Networks Junos Space versions prior to 16.1R1…
- Juniper Networks Junos Space
Not analysed yet 30 May 2017