Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the list filter field that, when visited b…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00218 · Published 2026-04-09 · Fixed in 24.1R5 Patch V3 CWE-79
Priority LOW 35
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-pat…
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00201 · Published 2026-01-15 · Fixed in 24.1R5 CWE-327
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when v…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when vi…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlets pages that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Configuration View page that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when v…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Management pages that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the template creation pages that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visit…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the arbitrary device search field that, wh…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, wh…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in a field on the Purging Policy page that, w…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by anothe…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definition page, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00274 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visi…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Template Definition page that,…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Load more