CVE-2025-59978: junos space before 24.1 (exclusive), 24.1 · update r1, 24.1 · update r2 (+1 more affected versions); +1 more affected…

Affected technology

junos space · before 24.1 (exclusive)
juniper

junos space · 24.1 · update r1
juniper

junos space · 24.1 · update r2
juniper

junos space · 24.1 · update r3
juniper

Junos Space · 0 to before 24.1R4
Juniper Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · Passive user interaction

What an attacker can do

An attacker can store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the target's administrative permissions. Vendor/CNA’s CVSS 4.0 assessment (base score 9.4/10) rates confidentiality, integrity and availability impact as high.