CVE-2017-2307

MEDIUM

Juniper Networks Junos Space <16.1R1 - XSS

Title source: llm

Description

A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/98749

[Vendor Advisory] https://kb.juniper.net/JSA10770

Scores

CVSS v3 6.1

EPSS 0.0024

EPSS Percentile 46.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

juniper/junos_space < 15.2

Juniper Networks/Junos Space < versions prior to 16.1R1

Published May 30, 2017

Tracked Since Feb 18, 2026