Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:junos_space:24.1:r3:*:*:*:*:*:*

part: a version: 24.1 update: r3

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos Space (67c6c89d-a279-59f5-8342-630785d618e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21907 vulnerable 2026-06-08 07:49:17.099997 Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)
MEDIUM (5.9)
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5.
Published: 2026-01-15T20:21:11.010Z
Updated: 2026-01-15T21:12:31.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60009 vulnerable 2026-06-08 07:37:26.414698 Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:19:53.583Z
Updated: 2025-10-09T19:46:40.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60002 vulnerable 2026-06-08 07:37:26.247788 Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:42.287Z
Updated: 2025-10-09T19:46:56.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60001 vulnerable 2026-06-08 07:37:26.247173 Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:11.512Z
Updated: 2025-10-09T19:47:02.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60000 vulnerable 2026-06-08 07:37:26.246289 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:16:35.897Z
Updated: 2025-10-09T19:47:09.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59999 vulnerable 2026-06-08 07:35:23.868794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59998 vulnerable 2026-06-08 07:35:23.868164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59997 vulnerable 2026-06-08 07:35:23.867783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59996 vulnerable 2026-06-08 07:35:23.867163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59995 vulnerable 2026-06-08 07:35:23.866662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59994 vulnerable 2026-06-08 07:35:23.865927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59993 vulnerable 2026-06-08 07:35:23.865369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59992 vulnerable 2026-06-08 07:35:23.864988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59991 vulnerable 2026-06-08 07:35:23.864358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59990 vulnerable 2026-06-08 07:35:23.863707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59989 vulnerable 2026-06-08 07:35:23.863088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59988 vulnerable 2026-06-08 07:35:23.862593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59987 vulnerable 2026-06-08 07:35:23.861949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59986 vulnerable 2026-06-08 07:35:23.861355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59985 vulnerable 2026-06-08 07:35:23.860792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59984 vulnerable 2026-06-08 07:35:23.860026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59983 vulnerable 2026-06-08 07:35:23.859407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59982 vulnerable 2026-06-08 07:35:23.858629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59981 vulnerable 2026-06-08 07:35:23.850854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59978 vulnerable 2026-06-08 07:35:23.847948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.