VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Oct 9, 2025· Updated Jun 17, 2026

CVE-2025-59978

CVE-2025-59978

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the target's administrative permissions. This issue affects all versions of Junos Space before 24.1R4.

Affected products

6
  • Juniper Networks/Junos Space6 versions
    cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:juniper:junos_space:*:*:*:*:*:*:*:*range: <24.1
    • cpe:2.3:a:juniper:junos_space:24.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:24.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:juniper:junos_space:24.1:r3:*:*:*:*:*:*
    • (no CPE)range: <24.1R4
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.