CVE-2025-59974
HIGHJuniper Space Security Director < 24.1R4 - Stored Cross-Site Scripting
Title source: llmDescription
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director: * All versions before 24.1R4.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://supportportal.juniper.net/JSA103139
Scores
CVSS v3
8.4
EPSS
0.0004
EPSS Percentile
11.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (2)
juniper/space_security_director
24.1 r1 (3 CPE variants)
juniper/space_security_director
< 24.1
Published
Oct 09, 2025
Tracked Since
Feb 18, 2026