Juniper Junos Space 15.1 R2
Approved changes feed: RSS · Atom
cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*
part: a version: 15.1 update: r2
| Vendor | Juniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e) |
|---|---|
| Product | Junos Space (67c6c89d-a279-59f5-8342-630785d618e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-0220 |
vulnerable | 2026-06-08 05:28:09.995433 |
Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
MEDIUM (6.8)
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1.
Published: 2021-01-15T17:36:01.350Z
Updated: 2024-09-16T22:20:15.866Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0017 |
vulnerable | 2026-06-08 05:12:08.815344 |
Junos Space: Unrestricted file upload vulnerability
MEDIUM (6.5)
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T23:51:28.235Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0016 |
vulnerable | 2026-06-08 05:12:08.806610 |
Junos Space: Authenticated user able to delete devices without delete device privileges
MEDIUM (6.5)
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
Published: 2019-01-15T21:00:00.000Z
Updated: 2024-09-16T22:20:18.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0011 |
vulnerable | 2026-06-08 05:10:20.520109 |
Junos Space: Reflected XSS vulnerability in Junos Space management interface
MEDIUM (5.4)
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.
Published: 2018-01-10T22:00:00.000Z
Updated: 2024-09-17T04:14:59.562Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.