Juniper Networks Junos Space Cross-Site Scripting Vulnerability in Secure Console Page

Vulnerability

A cross-site scripting vulnerability has been identified in Juniper Networks Junos Space, affecting all versions prior to 24.1R4. This vulnerability allows an attacker to inject script tags into the Secure Console page. When this page is accessed by another user, the injected script can execute commands with that user's permissions, potentially including administrative rights.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the execution of scripts in the context of the user's session.

Added: Oct 9, 2025, 5:27 PM
Updated: Oct 9, 2025, 5:27 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
1.7
exploitability
6.0
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.