Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Junos Space — Vulnerabilities & Security Advisories 49

All 49 CVE vulnerabilities found in Junos Space, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities for Junos Space, a network management platform developed by Juniper Networks, specifically focusing on weaknesses within this product ecosystem. The collection encompasses all known software defects, including memory corruption, access control flaws, and input validation errors reported across various releases of the application. The data spans the historical timeline of disclosed advisories, allowing users to review the evolution of security issues within the product's lifecycle. Readers can use this aggregation to track vendor-issued security advisories, analyze specific weakness classes such as buffer overflows or privilege escalation paths, and examine the complete vulnerability history of the product. The page serves as a centralized reference for security professionals seeking to understand the risk landscape surrounding Junos Space. It consolidates findings from public databases and vendor announcements, providing a structured view of how the software’s security posture has changed over time. By reviewing these entries, users can identify recurring patterns in defect types and correlate them with specific version updates. This resource supports risk assessment, patch planning, and compliance reporting by offering a clear, chronological record of identified vulnerabilities without requiring navigation through multiple fragmented sources.

Vendor: Juniper Networks

CVE ID Title CVSS Severity Published
CVE-2026-21904 Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2026-04-09
CVE-2026-21907 Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) CWE-327 5.9 Medium 2026-01-15
CVE-2025-60009 Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-60002 Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-60001 Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-60000 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59999 Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59998 Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59997 Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59996 Junos Space: Configuration View page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59995 Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59994 Junos Space: Quick Template page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59993 Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59992 Junos Space: Secure Console page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59991 Junos Space: Device Management pages are vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59990 Junos Space: Template creation pages are vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59989 Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59988 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59987 Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59986 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59985 Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59984 Junos Space: Global Search is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59983 Junos Space: Template Definition page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59982 Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59981 Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection CWE-79 6.1 Medium 2025-10-09
CVE-2025-59978 Junos Space: Stored cross-site scripting vulnerability in web application CWE-79 9.0 Critical 2025-10-09
CVE-2025-59976 Junos Space: Arbitrary file download vulnerability in web interface CWE-552 6.5 Medium 2025-10-09
CVE-2025-59975 Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS CWE-400 7.5 High 2025-10-09
CVE-2024-39563 Junos Space: Remote Command Execution (RCE) vulnerability in web application CWE-77 7.3 High 2024-10-11
CVE-2021-0220 Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI CWE-257 6.8 Medium 2021-01-15

All 49 known CVE vulnerabilities affecting Junos Space with full Chinese analysis, references, and POCs where available.