PT-2025-41434 · Juniper Networks · Junos Space

CVE-2025-59998

·

Publicado

2025-10-09

·

Atualizado

2025-10-09

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4
Description An Improper Neutralization of Input During Web Page Generation issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags in the Archive Log screen. When another user visits the affected screen, the attacker can execute commands with the target's permissions, potentially including administrator privileges. The issue involves a Cross-site Scripting condition.
Recommendations Update to Junos Space version 24.1R4 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-59998

Produtos afetados

Junos Space