Juniper Networks Junos Space Cross-Site Scripting Vulnerability in CLI Configlets

Vulnerability

A cross-site scripting vulnerability has been identified in Juniper Networks Junos Space, affecting all versions prior to 24.1R4. This vulnerability allows an attacker to inject script tags into the CLI Configlets pages. When these pages are accessed by another user, the injected scripts can execute commands with the user's permissions, potentially including administrative rights.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the execution of scripts in the context of the affected user.

Added: Oct 9, 2025, 5:24 PM
Updated: Oct 9, 2025, 5:24 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
5.0
exploitability
6.0
remediation
0.0
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.