Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when v…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when vi…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Archive Log screen that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlets pages that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Configuration View page that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Quick Template page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when v…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Secure Console page that, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Management pages that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the template creation pages that, when vis…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visit…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visite…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the arbitrary device search field that, wh…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, wh…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in a field on the Purging Policy page that, w…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00222 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by anothe…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definition page, when visited…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00274 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the dashboard search field that, when visi…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority LOW 23
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Template Definition page that,…
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79
Priority MEDIUM 43
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by ano…
CVSS 4.0CRITICAL 9.4· Network · Low privileges · User interaction · EPSS 0.00544 · Published 2025-10-09 · Fixed in 24.1R4 CWE-79