Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:junos_space:24.1:r1:*:*:*:*:*:*

part: a version: 24.1 update: r1

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos Space (67c6c89d-a279-59f5-8342-630785d618e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21907 vulnerable 2026-06-08 07:49:17.098400 Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)
MEDIUM (5.9)
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5.
Published: 2026-01-15T20:21:11.010Z
Updated: 2026-01-15T21:12:31.198Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60009 vulnerable 2026-06-08 07:37:26.414651 Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:19:53.583Z
Updated: 2025-10-09T19:46:40.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60002 vulnerable 2026-06-08 07:37:26.247661 Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Template Definitions page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:42.287Z
Updated: 2025-10-09T19:46:56.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60001 vulnerable 2026-06-08 07:37:26.247123 Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:17:11.512Z
Updated: 2025-10-09T19:47:02.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60000 vulnerable 2026-06-08 07:37:26.244309 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection
MEDIUM (6.1)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Published: 2025-10-09T16:16:35.897Z
Updated: 2025-10-09T19:47:09.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59999 vulnerable 2026-06-08 07:35:23.868635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59998 vulnerable 2026-06-08 07:35:23.868124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59997 vulnerable 2026-06-08 07:35:23.867649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59996 vulnerable 2026-06-08 07:35:23.867122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59995 vulnerable 2026-06-08 07:35:23.866395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59994 vulnerable 2026-06-08 07:35:23.865891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59993 vulnerable 2026-06-08 07:35:23.865333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59992 vulnerable 2026-06-08 07:35:23.864838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59991 vulnerable 2026-06-08 07:35:23.864055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59990 vulnerable 2026-06-08 07:35:23.863544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59989 vulnerable 2026-06-08 07:35:23.863046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59988 vulnerable 2026-06-08 07:35:23.862552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59987 vulnerable 2026-06-08 07:35:23.861742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59986 vulnerable 2026-06-08 07:35:23.861313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59985 vulnerable 2026-06-08 07:35:23.860517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59984 vulnerable 2026-06-08 07:35:23.859908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59983 vulnerable 2026-06-08 07:35:23.859365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59982 vulnerable 2026-06-08 07:35:23.851369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59981 vulnerable 2026-06-08 07:35:23.850813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59978 vulnerable 2026-06-08 07:35:23.846887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59976 vulnerable 2026-06-08 07:35:23.845414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39563 vulnerable 2026-06-08 06:41:51.017035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.