Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:junos_space:18.1:r1:*:*:*:*:*:*

part: a version: 18.1 update: r1

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos Space (67c6c89d-a279-59f5-8342-630785d618e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0017 vulnerable 2026-06-08 05:12:08.815550 Junos Space: Unrestricted file upload vulnerability
MEDIUM (6.5)
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T23:51:28.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0016 vulnerable 2026-06-08 05:12:08.813885 Junos Space: Authenticated user able to delete devices without delete device privileges
MEDIUM (6.5)
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T22:20:18.542Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.