Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:junos_space:24.1:r2:*:*:*:*:*:*

part: a version: 24.1 update: r2

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos Space (67c6c89d-a279-59f5-8342-630785d618e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21907 vulnerable 2026-06-08 07:49:17.099180 Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)
MEDIUM (5.9)
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5.
Published: 2026-01-15T20:21:11.010Z
Updated: 2026-01-15T21:12:31.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60009 vulnerable 2026-06-08 07:37:26.414676 Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:19:53.583Z
Updated: 2025-10-09T19:46:40.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60002 vulnerable 2026-06-08 07:37:26.247766 Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:42.287Z
Updated: 2025-10-09T19:46:56.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60001 vulnerable 2026-06-08 07:37:26.247149 Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:11.512Z
Updated: 2025-10-09T19:47:02.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60000 vulnerable 2026-06-08 07:37:26.245498 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:16:35.897Z
Updated: 2025-10-09T19:47:09.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59999 vulnerable 2026-06-08 07:35:23.868773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59998 vulnerable 2026-06-08 07:35:23.868141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59997 vulnerable 2026-06-08 07:35:23.867764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59996 vulnerable 2026-06-08 07:35:23.867142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59995 vulnerable 2026-06-08 07:35:23.866536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59994 vulnerable 2026-06-08 07:35:23.865910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59993 vulnerable 2026-06-08 07:35:23.865352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59992 vulnerable 2026-06-08 07:35:23.864858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59991 vulnerable 2026-06-08 07:35:23.864074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59990 vulnerable 2026-06-08 07:35:23.863686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59989 vulnerable 2026-06-08 07:35:23.863069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59988 vulnerable 2026-06-08 07:35:23.862572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59987 vulnerable 2026-06-08 07:35:23.861928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59986 vulnerable 2026-06-08 07:35:23.861335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59985 vulnerable 2026-06-08 07:35:23.860661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59984 vulnerable 2026-06-08 07:35:23.859927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59983 vulnerable 2026-06-08 07:35:23.859387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59982 vulnerable 2026-06-08 07:35:23.851390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59981 vulnerable 2026-06-08 07:35:23.850836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59978 vulnerable 2026-06-08 07:35:23.846907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59976 vulnerable 2026-06-08 07:35:23.846393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.