CVE-2017-10612

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Score

CVSS 3.0 8.0 High

Status

Modified - sirt@juniper.net

Published

2017-10-13

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Junos Space (Juniper)
• Junos Space (Juniper Networks)

References

• http://www.securityfocus.com/bid/101256
• https://kb.juniper.net/JSA10826