Description
A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/98749
Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA10770
Scores
CVSS v3
6.1
EPSS
0.0024
EPSS Percentile
46.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
juniper/junos_space
< 15.2
Juniper Networks/Junos Space
versions prior to 16.1R1
Published
May 30, 2017
Tracked Since
Feb 18, 2026