Junos Space
Monthly
Stored cross-site scripting (XSS) in Juniper Networks Junos Space allows unauthenticated remote attackers to inject malicious script tags into the list filter field, which execute with the permissions of any user who views the affected page, including administrators. All versions before 24.1R5 Patch V3 are vulnerable. No public exploit code or active exploitation has been identified at time of analysis.
Junos Space versions up to 24.1 is affected by use of a broken or risky cryptographic algorithm (CVSS 5.9).
Stored cross-site scripting in the CLI Configlet page of Juniper Junos Space (all versions before 24.1R4) allows an attacker who can author or modify a configlet to inject script tags that, when an administrator or other user opens that page, execute with the victim's permissions - including administrative command execution. Exploitation requires a second, higher-privileged user to view the malicious Configlet, and the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) indicates the attacker is authenticated, consistent with the need to access the Junos Space console to create or modify a configlet, whereas the vendor's CVSS 4.0 vector lists PR:N. No public exploit code identified at time of analysis, and EPSS is low at 0.22% (12th percentile), making this a moderate-priority issue rather than a top-tier emergency.
Stored cross-site scripting in Juniper Networks Junos Space (CWE-79) allows an attacker who can place script tags into the Template Definitions page to execute arbitrary commands in the browser session of any user who later visits that page, including an administrator, so the impact is bounded by the victim's own permissions rather than by direct compromise of the appliance itself. All Junos Space releases before 24.1R4 are affected, including 24.1R1, R2 and R3; the vendor rates it 5.1 (CVSS 4.0) and flags that the victim must actively visit the page (UI:A), while our assessment agrees a second user must open the page and notes that injecting the payload plausibly requires at least low-privileged access to the Template Definitions feature despite the vendor's PR:N rating. There is no public exploit identified at time of analysis, the issue is not in CISA KEV, and EPSS is low at 0.22% (12th percentile).
Cross-site scripting in the Generate Report page of Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker inject script tags into a report that, when opened by another user, execute in that victim's browser session with the victim's privileges - up to full administrative control of the management platform if an administrator views the poisoned page. Our independent assessment rates this a moderate, not high-priority, issue: exploitation is not self-contained, because a second user must actively visit the crafted report, and the injection step most plausibly requires authenticated access to the web management interface even though Juniper's CVSS 4.0 vector lists PR:N. No public exploit code or confirmed active exploitation has been identified at time of analysis. Remediation is available in Junos Space 24.1R4.
Cross-site scripting in Juniper Junos Space (all versions before 24.1R4) allows a remote attacker to inject script tags into the Generate Report page, which then execute with the privileges of any user-including an administrator-who visits the page. Successful exploitation requires both the injection and a subsequent visit by a higher-privileged victim, so the attack cannot succeed autonomously. No public exploit code or confirmed active exploitation has been identified, and EPSS estimates a low 0.22% probability of exploitation in the next 30 days.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker plant script tags in the API Access Profiles page that fire in the browser of any user who subsequently opens that page, including an administrator, allowing commands to run with the victim's permissions. The vendor rates the issue CVSS 4.0 5.1 (Medium, vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/...), with exploitation gated on victim interaction - the payload is inert until a privileged user views the poisoned page. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is 0.24% (13th percentile), indicating low predicted exploitation activity; the independent assessment narrows the practical attacker population to users who can already reach and modify that administrative configuration area.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets a remote attacker inject script tags into content rendered by the Archive Log screen, so that when another user - including an administrator - opens that screen the payload executes with the victim's permissions. Per the CVSS 4.0 vector the attacker does not need to authenticate to plant the payload (PR:N), but exploitation requires the victim to actively visit the Archive Log page (UI:A), which is the primary limiting factor; impact is confined to the victim's authenticated web session (SC:L/SI:L) rather than the appliance OS. No public exploit code has been identified and EPSS is low at 0.22% (12th percentile), and the issue is fixed in Junos Space 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space CLI Configlets lets an attacker inject script tags that execute when another user opens the affected Configlets page, enabling command execution with the victim's permissions, including an administrator's. All Junos Space versions before 24.1R4 are affected, and the issue is rated MEDIUM at CVSS 5.1 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A); the independent assessment notes that a victim must view the crafted page and that authoring or storing a configlet is a practical prerequisite despite the vector's PR:N. EPSS is 0.22% (12th percentile) and no public exploit identified at time of analysis.
Stored cross-site scripting (XSS) in Juniper Networks Junos Space (all versions before 24.1R4) allows an attacker to inject script tags into the Configuration View page, which when visited by another user executes commands with that user's privileges - including administrator. The vulnerability requires the attacker to first store the payload in a rendered configuration view and a separate victim to open the poisoned page; authentication requirements are not fully confirmed, with the vendor's CVSS 4.0 vector indicating PR:N (unauthenticated) while the independent assessment rates PR:L (authenticated low-privileged). No public exploit code or active exploitation has been identified at time of analysis (EPSS 0.22%, percentile 12%).
Stored cross-site scripting in the Quick Template page of Juniper Junos Space (all versions before 24.1R4) lets an attacker plant script tags that execute in the browser session of any other user who later opens the template, allowing command execution with that victim's privileges, including an administrator's. Exploitation is a two-step affair: the payload must first be stored in a Quick Template, and a second user (per the UI:A metric) must visit the page for it to fire, so impact is bounded to the victim's web-UI session rather than the underlying host. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.22% (12th percentile), consistent with a moderate CVSS 4.0 base score of 5.1.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker plant script tags in the Quick Template page, which then execute in the browser session of any operator or administrator who opens the tampered template, running commands with that victim's privileges. The vendor rates this CVSS 4.0 base 5.1 (medium), and our independent CVSS 3.1 assessment scores it AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - exploitation is not autonomous: it requires that the attacker already be positioned to create or edit a Quick Template and that a second, more privileged user subsequently views the page. There is no CISA KEV entry and no public exploit identified at time of analysis; EPSS is low at 0.22% (12th percentile), consistent with a targeted management-plane issue rather than an internet-scale mass-exploitation target.
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) lets an attacker who can write into the Space Node Setting fields inject script that executes in the browser of any user who later views the affected page, potentially running commands with that user's permissions - including an administrator's. Exploitation is two-stage: the payload must first be placed in the management configuration field, then a second, typically higher-privileged user must view the rendered setting (victim interaction is mandatory, per the assessed CVSS:3.1 vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). No public exploit code has been identified at time of analysis and no KEV listing is present; EPSS is low at 0.22% (12th percentile), and the vendor rates the issue CVSS 4.0 5.1 (Medium).
Stored cross-site scripting in Juniper Networks Junos Space versions before 24.1R4 allows an attacker to inject script tags into the Secure Console page, which execute with the permissions of any user who subsequently visits that page-including administrators-potentially enabling command execution on the management console. Exploitation requires active user interaction (a victim must visit the crafted Secure Console page), and no public exploit code has been identified at time of analysis; the EPSS score is 0.22% (percentile 12%), indicating low predicted exploitation likelihood. The vendor has released a fix in 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker inject script tags into Device Management pages that execute in the browser of any operator or administrator who later opens the poisoned page, running with that victim's privileges and enabling management-session actions such as issuing commands. The vendor rates this CVSS 4.0 5.1 (MEDIUM); EPSS is only 0.22% (12th percentile) and no public exploit code has been identified at time of analysis, with no CISA KEV listing. Exploitation is a two-step, victim-dependent chain: the attacker must first get script content into a device attribute rendered in the Device Management UI, and a privileged user must then actively navigate to that specific page.
Stored cross-site scripting in Juniper Networks Junos Space lets an attacker plant script tags in the template creation pages, which then execute in the browser of any user - including an administrator - who subsequently views the crafted template, running commands with that victim's privileges. All versions before 24.1R4 are affected, with 24.1R1 through 24.1R3 explicitly enumerated in the vendor's CPE data; the vendor has released 24.1R4 as the fix. No public exploit code was identified at time of analysis, and the vendor rates this 5.1 (medium) under CVSS 4.0, though the vendor's PR:N rating is disputed - our assessment holds that reaching the template creation function realistically presupposes an authenticated Junos Space account (PR:L), and successful impact additionally requires a privileged second user to actively view the malicious template (UI:A).
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) lets an attacker inject script tags into the Device Discovery page that execute in the browser session of any user who subsequently visits that page - including an administrator - running with the victim's own permissions. The independent assessment scores this as CVSS 3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (medium severity, CVSS 4.0 base 5.1, CWE-79), reflecting that exploitation is interaction-dependent and not a default-configuration, unauthenticated remote code execution path: the attacker must first store the payload and then a separate, higher-privileged user must render it. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the EPSS score is low at 0.24% (13th percentile), so real-world priority is moderate-to-low.
Stored cross-site scripting in the Generate Report page of Juniper Junos Space lets an attacker embed script tags in a generated report so that any user who later opens it - including an administrator - has commands executed under that user's own permissions. Every Junos Space release before 24.1R4 is affected. No public exploit code or confirmed active exploitation has been identified at time of analysis, and EPSS places exploitation probability at roughly 0.22% (12th percentile), consistent with the requirement that a privileged victim interact with the crafted report.
Cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets a remote attacker inject script tags into the arbitrary device search field which render when another Junos Space user visits the affected content, executing in that victim's authenticated session and allowing actions with the victim's permissions - including an administrator's. The CVSS 4.0 vector shows a network-reachable, no-privilege attack (PR:N) gated on victim interaction (UI:A), which is the limiting factor; the independent assessment scores it CVSS 3.1 5.1 (S:C, C:L/I:L) and characterizes it as a moderate, not critical, priority. No public exploit code has been identified at time of analysis, EPSS is low at 0.22% (12th percentile), and upgrading to 24.1R4 removes the condition.
Stored cross-site scripting (XSS) in Juniper Junos Space before 24.1R4 allows an attacker who can inject script tags into Model Devices input fields to execute arbitrary commands with the privileges of any user who views the poisoned entry, including an administrator. The vendor assigned CVSS 4.0 base score 5.1 (Medium) with a vector that lists PR:N, but the independent assessment notes the feature is normally authenticated (PR:L) and requires user interaction (UI:A), making exploitation targeted. No public exploit code has been identified, and EPSS is 0.22% (12th percentile).
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4, including 24.1R1, R2 and R3) lets an attacker inject script content into a field on the Purging Policy page of the web management interface, which then executes in the browser of any user - including an administrator - who subsequently views that page, running commands with the victim's permissions. Exploitation is not confirmed as active (no CISA KEV listing) and no public exploit code has been identified at time of analysis; EPSS is low at 0.22% (12th percentile), consistent with this being a moderate, lower-priority issue requiring a privileged victim to open the poisoned page. The vendor has released a fix in 24.1R4.
Cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an unauthenticated remote attacker inject script tags through the Global Search feature; the payload is dormant until a victim - potentially an administrator - views the affected search results, at which point the script runs with that user's permissions inside the Junos Space web UI. Exploitation is constrained by the required user interaction (UI:A) and impact is confined to the victim's browser session rather than the underlying host, which is why the vendor rates it CVSS 4.0 5.1 and EPSS sits at only 0.22% (12th percentile). No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV. Juniper has released a fix in 24.1R4, and the primary limiting factor remains that an operator must render the poisoned Global Search output.
Stored cross-site scripting (XSS) in Juniper Networks Junos Space (all versions before 24.1R4) allows an attacker who can inject content into the Template Definition page to execute arbitrary script in the context of any user who later views that page, including administrators. Realistically, the injection point requires an authenticated session on the management platform, and exploitation also depends on a victim (ideally an admin) visiting the crafted page, so it is a moderate-severity issue (CWE-79; rated CVSS 4.0 5.1 by Juniper SIRT, independent assessment CVSS 3.1 with PR:L/UI:R). No public exploit code has been identified, and EPSS is low (0.27%, 18th percentile).
Stored cross-site scripting (XSS) in the Juniper Junos Space dashboard search field allows an attacker to inject script tags that execute with the privileges of any user-including administrators-who views the affected dashboard. All versions before 24.1R4 are affected. Exploitation requires user interaction and, per independent assessment, low-privileged access to the console; no public exploit code has been identified and EPSS is low (0.27%). A vendor patch is available in version 24.1R4.
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) allows authenticated attackers to inject script tags into the Device Template Definition page, which then execute in the context of any user-including an administrator-who views the compromised template. Exploitation requires the attacker to have privileges to create or edit device templates and a separate victim to visit the page, granting the attacker the victim's permissions. No public exploit code exists at time of analysis, and EPSS is low at 0.27% (18th percentile), though the vendor has released a patch in version 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) allows an authenticated attacker holding a low-privileged account to persist script content into a web page that, when later viewed by an administrator, executes in that administrator's browser session with the administrator's own permissions. Exploitation is constrained: the attacker must be able to submit input into a field that is stored and re-rendered, and impact only occurs after a privileged victim views the affected page, so no compromise happens without that interaction. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV; EPSS is 0.53% (43rd percentile), indicating a low likelihood of near-term exploitation, while the vendor's CVSS 4.0 base score of 9.4 reflects the potentially complete loss of confidentiality, integrity and availability of the management platform once an admin session is hijacked.
Authenticated file disclosure in Juniper Networks Junos Space lets a low-privileged network-based user read arbitrary files from the appliance filesystem by sending crafted GET requests to the web interface that evade the JBoss daemon's path restrictions. The issue affects all Junos Space versions before 24.1R3, including 24.1R1 and 24.1R2, and is rated by the vendor at CVSS 4.0 base 7.1 (our independent CVSS 3.1 assessment is 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) because impact is limited to confidentiality - no integrity or availability effect. Exploitation requires a valid low-privileged session (PR:L per the vector), no user interaction is needed, and there is no public exploit identified at time of analysis; EPSS is low at 0.29% (19th percentile), and the flaw is not in CISA KEV.
Denial of service in Juniper Junos Space allows unauthenticated remote attackers to exhaust file handles in the HTTP daemon by continuously flooding the device with inbound API calls, blocking SSH and WebUI access and forcing a manual reboot to restore management functionality. All versions before 22.2R1 Patch V3 and 23.1 releases before 23.1R1 Patch V3 are affected. No public exploit code or active exploitation has been identified at time of analysis (EPSS 0.41%).
A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 21.5% and no vendor patch available.
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 20.6% and no vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 11.2% and no vendor patch available.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity.
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate. Rated medium severity (CVSS 4.7). No vendor patch available.
Stored cross-site scripting (XSS) in Juniper Networks Junos Space allows unauthenticated remote attackers to inject malicious script tags into the list filter field, which execute with the permissions of any user who views the affected page, including administrators. All versions before 24.1R5 Patch V3 are vulnerable. No public exploit code or active exploitation has been identified at time of analysis.
Junos Space versions up to 24.1 is affected by use of a broken or risky cryptographic algorithm (CVSS 5.9).
Stored cross-site scripting in the CLI Configlet page of Juniper Junos Space (all versions before 24.1R4) allows an attacker who can author or modify a configlet to inject script tags that, when an administrator or other user opens that page, execute with the victim's permissions - including administrative command execution. Exploitation requires a second, higher-privileged user to view the malicious Configlet, and the assessed vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) indicates the attacker is authenticated, consistent with the need to access the Junos Space console to create or modify a configlet, whereas the vendor's CVSS 4.0 vector lists PR:N. No public exploit code identified at time of analysis, and EPSS is low at 0.22% (12th percentile), making this a moderate-priority issue rather than a top-tier emergency.
Stored cross-site scripting in Juniper Networks Junos Space (CWE-79) allows an attacker who can place script tags into the Template Definitions page to execute arbitrary commands in the browser session of any user who later visits that page, including an administrator, so the impact is bounded by the victim's own permissions rather than by direct compromise of the appliance itself. All Junos Space releases before 24.1R4 are affected, including 24.1R1, R2 and R3; the vendor rates it 5.1 (CVSS 4.0) and flags that the victim must actively visit the page (UI:A), while our assessment agrees a second user must open the page and notes that injecting the payload plausibly requires at least low-privileged access to the Template Definitions feature despite the vendor's PR:N rating. There is no public exploit identified at time of analysis, the issue is not in CISA KEV, and EPSS is low at 0.22% (12th percentile).
Cross-site scripting in the Generate Report page of Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker inject script tags into a report that, when opened by another user, execute in that victim's browser session with the victim's privileges - up to full administrative control of the management platform if an administrator views the poisoned page. Our independent assessment rates this a moderate, not high-priority, issue: exploitation is not self-contained, because a second user must actively visit the crafted report, and the injection step most plausibly requires authenticated access to the web management interface even though Juniper's CVSS 4.0 vector lists PR:N. No public exploit code or confirmed active exploitation has been identified at time of analysis. Remediation is available in Junos Space 24.1R4.
Cross-site scripting in Juniper Junos Space (all versions before 24.1R4) allows a remote attacker to inject script tags into the Generate Report page, which then execute with the privileges of any user-including an administrator-who visits the page. Successful exploitation requires both the injection and a subsequent visit by a higher-privileged victim, so the attack cannot succeed autonomously. No public exploit code or confirmed active exploitation has been identified, and EPSS estimates a low 0.22% probability of exploitation in the next 30 days.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker plant script tags in the API Access Profiles page that fire in the browser of any user who subsequently opens that page, including an administrator, allowing commands to run with the victim's permissions. The vendor rates the issue CVSS 4.0 5.1 (Medium, vector CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/...), with exploitation gated on victim interaction - the payload is inert until a privileged user views the poisoned page. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is 0.24% (13th percentile), indicating low predicted exploitation activity; the independent assessment narrows the practical attacker population to users who can already reach and modify that administrative configuration area.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets a remote attacker inject script tags into content rendered by the Archive Log screen, so that when another user - including an administrator - opens that screen the payload executes with the victim's permissions. Per the CVSS 4.0 vector the attacker does not need to authenticate to plant the payload (PR:N), but exploitation requires the victim to actively visit the Archive Log page (UI:A), which is the primary limiting factor; impact is confined to the victim's authenticated web session (SC:L/SI:L) rather than the appliance OS. No public exploit code has been identified and EPSS is low at 0.22% (12th percentile), and the issue is fixed in Junos Space 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space CLI Configlets lets an attacker inject script tags that execute when another user opens the affected Configlets page, enabling command execution with the victim's permissions, including an administrator's. All Junos Space versions before 24.1R4 are affected, and the issue is rated MEDIUM at CVSS 5.1 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A); the independent assessment notes that a victim must view the crafted page and that authoring or storing a configlet is a practical prerequisite despite the vector's PR:N. EPSS is 0.22% (12th percentile) and no public exploit identified at time of analysis.
Stored cross-site scripting (XSS) in Juniper Networks Junos Space (all versions before 24.1R4) allows an attacker to inject script tags into the Configuration View page, which when visited by another user executes commands with that user's privileges - including administrator. The vulnerability requires the attacker to first store the payload in a rendered configuration view and a separate victim to open the poisoned page; authentication requirements are not fully confirmed, with the vendor's CVSS 4.0 vector indicating PR:N (unauthenticated) while the independent assessment rates PR:L (authenticated low-privileged). No public exploit code or active exploitation has been identified at time of analysis (EPSS 0.22%, percentile 12%).
Stored cross-site scripting in the Quick Template page of Juniper Junos Space (all versions before 24.1R4) lets an attacker plant script tags that execute in the browser session of any other user who later opens the template, allowing command execution with that victim's privileges, including an administrator's. Exploitation is a two-step affair: the payload must first be stored in a Quick Template, and a second user (per the UI:A metric) must visit the page for it to fire, so impact is bounded to the victim's web-UI session rather than the underlying host. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.22% (12th percentile), consistent with a moderate CVSS 4.0 base score of 5.1.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker plant script tags in the Quick Template page, which then execute in the browser session of any operator or administrator who opens the tampered template, running commands with that victim's privileges. The vendor rates this CVSS 4.0 base 5.1 (medium), and our independent CVSS 3.1 assessment scores it AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - exploitation is not autonomous: it requires that the attacker already be positioned to create or edit a Quick Template and that a second, more privileged user subsequently views the page. There is no CISA KEV entry and no public exploit identified at time of analysis; EPSS is low at 0.22% (12th percentile), consistent with a targeted management-plane issue rather than an internet-scale mass-exploitation target.
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) lets an attacker who can write into the Space Node Setting fields inject script that executes in the browser of any user who later views the affected page, potentially running commands with that user's permissions - including an administrator's. Exploitation is two-stage: the payload must first be placed in the management configuration field, then a second, typically higher-privileged user must view the rendered setting (victim interaction is mandatory, per the assessed CVSS:3.1 vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). No public exploit code has been identified at time of analysis and no KEV listing is present; EPSS is low at 0.22% (12th percentile), and the vendor rates the issue CVSS 4.0 5.1 (Medium).
Stored cross-site scripting in Juniper Networks Junos Space versions before 24.1R4 allows an attacker to inject script tags into the Secure Console page, which execute with the permissions of any user who subsequently visits that page-including administrators-potentially enabling command execution on the management console. Exploitation requires active user interaction (a victim must visit the crafted Secure Console page), and no public exploit code has been identified at time of analysis; the EPSS score is 0.22% (percentile 12%), indicating low predicted exploitation likelihood. The vendor has released a fix in 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an attacker inject script tags into Device Management pages that execute in the browser of any operator or administrator who later opens the poisoned page, running with that victim's privileges and enabling management-session actions such as issuing commands. The vendor rates this CVSS 4.0 5.1 (MEDIUM); EPSS is only 0.22% (12th percentile) and no public exploit code has been identified at time of analysis, with no CISA KEV listing. Exploitation is a two-step, victim-dependent chain: the attacker must first get script content into a device attribute rendered in the Device Management UI, and a privileged user must then actively navigate to that specific page.
Stored cross-site scripting in Juniper Networks Junos Space lets an attacker plant script tags in the template creation pages, which then execute in the browser of any user - including an administrator - who subsequently views the crafted template, running commands with that victim's privileges. All versions before 24.1R4 are affected, with 24.1R1 through 24.1R3 explicitly enumerated in the vendor's CPE data; the vendor has released 24.1R4 as the fix. No public exploit code was identified at time of analysis, and the vendor rates this 5.1 (medium) under CVSS 4.0, though the vendor's PR:N rating is disputed - our assessment holds that reaching the template creation function realistically presupposes an authenticated Junos Space account (PR:L), and successful impact additionally requires a privileged second user to actively view the malicious template (UI:A).
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) lets an attacker inject script tags into the Device Discovery page that execute in the browser session of any user who subsequently visits that page - including an administrator - running with the victim's own permissions. The independent assessment scores this as CVSS 3.1 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (medium severity, CVSS 4.0 base 5.1, CWE-79), reflecting that exploitation is interaction-dependent and not a default-configuration, unauthenticated remote code execution path: the attacker must first store the payload and then a separate, higher-privileged user must render it. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the EPSS score is low at 0.24% (13th percentile), so real-world priority is moderate-to-low.
Stored cross-site scripting in the Generate Report page of Juniper Junos Space lets an attacker embed script tags in a generated report so that any user who later opens it - including an administrator - has commands executed under that user's own permissions. Every Junos Space release before 24.1R4 is affected. No public exploit code or confirmed active exploitation has been identified at time of analysis, and EPSS places exploitation probability at roughly 0.22% (12th percentile), consistent with the requirement that a privileged victim interact with the crafted report.
Cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets a remote attacker inject script tags into the arbitrary device search field which render when another Junos Space user visits the affected content, executing in that victim's authenticated session and allowing actions with the victim's permissions - including an administrator's. The CVSS 4.0 vector shows a network-reachable, no-privilege attack (PR:N) gated on victim interaction (UI:A), which is the limiting factor; the independent assessment scores it CVSS 3.1 5.1 (S:C, C:L/I:L) and characterizes it as a moderate, not critical, priority. No public exploit code has been identified at time of analysis, EPSS is low at 0.22% (12th percentile), and upgrading to 24.1R4 removes the condition.
Stored cross-site scripting (XSS) in Juniper Junos Space before 24.1R4 allows an attacker who can inject script tags into Model Devices input fields to execute arbitrary commands with the privileges of any user who views the poisoned entry, including an administrator. The vendor assigned CVSS 4.0 base score 5.1 (Medium) with a vector that lists PR:N, but the independent assessment notes the feature is normally authenticated (PR:L) and requires user interaction (UI:A), making exploitation targeted. No public exploit code has been identified, and EPSS is 0.22% (12th percentile).
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4, including 24.1R1, R2 and R3) lets an attacker inject script content into a field on the Purging Policy page of the web management interface, which then executes in the browser of any user - including an administrator - who subsequently views that page, running commands with the victim's permissions. Exploitation is not confirmed as active (no CISA KEV listing) and no public exploit code has been identified at time of analysis; EPSS is low at 0.22% (12th percentile), consistent with this being a moderate, lower-priority issue requiring a privileged victim to open the poisoned page. The vendor has released a fix in 24.1R4.
Cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) lets an unauthenticated remote attacker inject script tags through the Global Search feature; the payload is dormant until a victim - potentially an administrator - views the affected search results, at which point the script runs with that user's permissions inside the Junos Space web UI. Exploitation is constrained by the required user interaction (UI:A) and impact is confined to the victim's browser session rather than the underlying host, which is why the vendor rates it CVSS 4.0 5.1 and EPSS sits at only 0.22% (12th percentile). No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV. Juniper has released a fix in 24.1R4, and the primary limiting factor remains that an operator must render the poisoned Global Search output.
Stored cross-site scripting (XSS) in Juniper Networks Junos Space (all versions before 24.1R4) allows an attacker who can inject content into the Template Definition page to execute arbitrary script in the context of any user who later views that page, including administrators. Realistically, the injection point requires an authenticated session on the management platform, and exploitation also depends on a victim (ideally an admin) visiting the crafted page, so it is a moderate-severity issue (CWE-79; rated CVSS 4.0 5.1 by Juniper SIRT, independent assessment CVSS 3.1 with PR:L/UI:R). No public exploit code has been identified, and EPSS is low (0.27%, 18th percentile).
Stored cross-site scripting (XSS) in the Juniper Junos Space dashboard search field allows an attacker to inject script tags that execute with the privileges of any user-including administrators-who views the affected dashboard. All versions before 24.1R4 are affected. Exploitation requires user interaction and, per independent assessment, low-privileged access to the console; no public exploit code has been identified and EPSS is low (0.27%). A vendor patch is available in version 24.1R4.
Stored cross-site scripting in Juniper Junos Space (all versions before 24.1R4) allows authenticated attackers to inject script tags into the Device Template Definition page, which then execute in the context of any user-including an administrator-who views the compromised template. Exploitation requires the attacker to have privileges to create or edit device templates and a separate victim to visit the page, granting the attacker the victim's permissions. No public exploit code exists at time of analysis, and EPSS is low at 0.27% (18th percentile), though the vendor has released a patch in version 24.1R4.
Stored cross-site scripting in Juniper Networks Junos Space (all versions before 24.1R4) allows an authenticated attacker holding a low-privileged account to persist script content into a web page that, when later viewed by an administrator, executes in that administrator's browser session with the administrator's own permissions. Exploitation is constrained: the attacker must be able to submit input into a field that is stored and re-rendered, and impact only occurs after a privileged victim views the affected page, so no compromise happens without that interaction. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV; EPSS is 0.53% (43rd percentile), indicating a low likelihood of near-term exploitation, while the vendor's CVSS 4.0 base score of 9.4 reflects the potentially complete loss of confidentiality, integrity and availability of the management platform once an admin session is hijacked.
Authenticated file disclosure in Juniper Networks Junos Space lets a low-privileged network-based user read arbitrary files from the appliance filesystem by sending crafted GET requests to the web interface that evade the JBoss daemon's path restrictions. The issue affects all Junos Space versions before 24.1R3, including 24.1R1 and 24.1R2, and is rated by the vendor at CVSS 4.0 base 7.1 (our independent CVSS 3.1 assessment is 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) because impact is limited to confidentiality - no integrity or availability effect. Exploitation requires a valid low-privileged session (PR:L per the vector), no user interaction is needed, and there is no public exploit identified at time of analysis; EPSS is low at 0.29% (19th percentile), and the flaw is not in CISA KEV.
Denial of service in Juniper Junos Space allows unauthenticated remote attackers to exhaust file handles in the HTTP daemon by continuously flooding the device with inbound API calls, blocking SSH and WebUI access and forcing a manual reboot to restore management functionality. All versions before 22.2R1 Patch V3 and 23.1 releases before 23.1R1 Patch V3 are affected. No public exploit code or active exploitation has been identified at time of analysis (EPSS 0.41%).
A Command Injection vulnerability in Juniper Networks Junos Space allows an unauthenticated, network-based attacker sending a specially crafted request to execute arbitrary shell commands on the. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.
Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable. No vendor patch available.
An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 21.5% and no vendor patch available.
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 20.6% and no vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 11.2% and no vendor patch available.
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity.
Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate. Rated medium severity (CVSS 4.7). No vendor patch available.