CVE-2016-4931

MEDIUM

Junos Space < 15.2 - XML External Entity Injection

Title source: llm

XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Vendor Advisory x_refsource_confirm

CVSS v3 6.5

EPSS 0.0027

EPSS Percentile 50.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-611

Status published

Products (1)

juniper/junos_space < 15.2

Published Mar 20, 2017

Tracked Since Feb 18, 2026