CVE-2013-5095

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-16 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka PR 884469.

Affected products

Juniper Networks Junos Space: 11.1, 11.2, 11.3, 11.4, 12.1, 12.2 (+1)
Juniper Junos Space Ja1500 Appliance: all versions
Juniper Junos Space Virtual Appliance: all versions

References

http://kb.juniper.net/JSA10585
http://www.securitytracker.com/id/1028923
http://kb.juniper.net/JSA10585
http://www.securitytracker.com/id/1028923

Get alerted when CVE-2013-5095 or the next vulnerability affects your stack