CVE-2025-59974: space security director before 24.1 (exclusive), 24.1 · update r1, 24.1 · update r2 (+1 more affected versions); +1…

Affected technology

space security director · before 24.1 (exclusive)
juniper

space security director · 24.1 · update r1
juniper

space security director · 24.1 · update r2
juniper

space security director · 24.1 · update r3
juniper

Junos Space Security Director · 0 to before 24.1R4
Juniper Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction

What an attacker can do

An attacker can inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director: * All versions before 24.1R4. Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high.