Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:junos_space:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos Space (67c6c89d-a279-59f5-8342-630785d618e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-0220 vulnerable 2026-06-08 05:28:09.985478 Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI
MEDIUM (6.8)
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1.
Published: 2021-01-15T17:36:01.350Z
Updated: 2024-09-16T22:20:15.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3412 vulnerable 2026-06-08 05:05:32.534796 Details available
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.
Published: 2014-05-20T14:00:00.000Z
Updated: 2024-08-06T10:43:05.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3497 vulnerable 2026-06-08 05:04:31.820046 Details available
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Published: 2013-05-08T23:00:00.000Z
Updated: 2024-08-06T16:14:54.655Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.