VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0011

CVE-2018-0011

Description

A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.

Affected products

17
  • Juniper Networks/Junos Space17 versions
    cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:juniper:junos_space:13.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:13.3:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:13.3:r4:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:14.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:15.2:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:16.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: All

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.