TI-2018-00043 Aliases CVE-2018-0046 GHSA-vx6g-fghm-vx43

Junos Space: Reflected Cross-site Scripting vulnerability in OpenNMS

MEDIUM 41CWE-79Published 2018-10-10 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions prior to 18.2R1.

Why it matters now

EPSS 0.01646 76th percentileScored 2026-11-07

Fix Fixed Junos Space (Juniper Networks): 18.2R1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Juniper	Junos Space	before 18.2R1	18.2R1	Patch available	CNA

Junos Space VendorJuniper Affected before 18.2R1 Fixed in 18.2R1 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:juniper:junos_space:18.1r1:::::::*	18.1r1	Vulnerable	Juniper

cpe:2.3:a:juniper:junos_space:18.1r1:*:*:*:*:*:*:* Versions 18.1r1 Vulnerable ·Juniper

Remediation

Fix · CNA Junos Space (Juniper Networks) Fixed in 18.2R1

Timeline

2026-10-02 Threatist record created from CVE-2018-0046
2026-10-03 Alias added: GHSA-vx6g-fghm-vx43

References

Patch 1

https://github.com/OpenNMS/opennms/commit/8710463077c10034fcfa06556a98fb1a1a64fd0d

Advisory 1

https://kb.juniper.net/JSA10880

TI-2014-00408 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1… CVSS 2.0HIGH 10.0
TI-2014-01931 Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and… CVSS 2.0HIGH 10.0
TI-2014-00436 Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1… CVSS 2.0HIGH 10.0
TI-2014-00435 Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51… CVSS 2.0HIGH 10.0
TI-2017-07788 Junos Space: Authentication bypass vulnerability CVSS 3.0CRITICAL 9.8
TI-2014-02744 Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in… CVSS 2.0HIGH 10.0

See all 78 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences