Juniper Junos Space 17.1 R1
Approved changes feed: RSS · Atom
cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
part: a version: 17.1 update: r1
| Vendor | Juniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e) |
|---|---|
| Product | Junos Space (67c6c89d-a279-59f5-8342-630785d618e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0017 |
vulnerable | 2026-06-08 05:12:08.815515 |
Junos Space: Unrestricted file upload vulnerability
MEDIUM (6.5)
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T23:51:28.235Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0016 |
vulnerable | 2026-06-08 05:12:08.812518 |
Junos Space: Authenticated user able to delete devices without delete device privileges
MEDIUM (6.5)
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T22:20:18.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0011 |
vulnerable | 2026-06-08 05:10:20.524265 |
Junos Space: Reflected XSS vulnerability in Junos Space management interface
MEDIUM (5.4)
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.
Published: 2018-01-10T22:00:00.000Z
Updated: 2024-09-17T04:14:59.562Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.