Junos Space (Juniper Networks) - vulnerabilities (CVEs)

49 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-04-09. Vendor: Juniper Networks.

CVEs of Junos Space

CVE-2026-21904 - CVSS 6.1 (medium), 2026-04-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2026-21907 - CVSS 8.2 (high), 2026-01-15: A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers…
CVE-2025-60009 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-60000 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-60002 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-60001 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59997 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59996 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59999 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59995 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59998 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59994 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59990 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59993 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59992 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59991 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59984 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59987 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59986 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59989 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59985 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59988 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59981 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59978 - CVSS 9.4 (critical), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59983 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59982 - CVSS 6.1 (medium), 2025-10-09: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to…
CVE-2025-59975 - CVSS 8.7 (high), 2025-10-09: An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker…
CVE-2025-59976 - CVSS 7.1 (high), 2025-10-09: An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted…
CVE-2024-39563 - CVSS 7.3 (high), 2024-10-11: A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to…
CVE-2021-0220 - CVSS 6.8 (medium), 2021-01-15: The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who…
CVE-2020-1652 - CVSS 9.8 (critical), 2020-07-17: OpenNMS is accessible via port 9443
CVE-2020-1611 - CVSS 6.5 (medium), 2020-01-15: A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious…
CVE-2019-0017 - CVSS 8.8 (high), 2019-01-15: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images…
CVE-2019-0016 - CVSS 6.5 (medium), 2019-01-15: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions…
CVE-2018-0046 - CVSS 8.8 (high), 2018-10-10: A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or…
CVE-2018-0011 - CVSS 5.4 (medium), 2018-01-10: A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal…
CVE-2018-0013 - CVSS 6.5 (medium), 2018-01-10: A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the…
CVE-2018-0012 - CVSS 7.8 (high), 2018-01-10: Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges.
CVE-2017-10622 - CVSS 9.8 (critical), 2017-10-13: An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker…
CVE-2017-10624 - CVSS 7.5 (high), 2017-10-13: Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized…
CVE-2017-10623 - CVSS 8.1 (high), 2017-10-13: Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept,…
CVE-2017-10612 - CVSS 8 (high), 2017-10-13: A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or…
CVE-2017-2310 - CVSS 5.3 (medium), 2017-05-30: A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets,…
CVE-2017-2309 - CVSS 5.9 (medium), 2017-05-30: On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web…
CVE-2017-2308 - CVSS 6.5 (medium), 2017-05-30: An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary…
CVE-2017-2311 - CVSS 5.3 (medium), 2017-05-30: On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a…
CVE-2017-2306 - CVSS 8.8 (high), 2017-05-30: On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web…
CVE-2017-2305 - CVSS 8.8 (high), 2017-05-30: On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web…
CVE-2017-2307 - CVSS 6.1 (medium), 2017-05-30: A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote…