CVE-2017-10612: Junos Space: Persistent Cross site scripting in Junos Space

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-13 · updated 2026-06-17
Weakness: CWE-79

Description

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

Affected products

Juniper Networks Junos Space: through 16.1r3

References

http://www.securityfocus.com/bid/101256
https://kb.juniper.net/JSA10826
http://www.securityfocus.com/bid/101256
https://kb.juniper.net/JSA10826

Get alerted when CVE-2017-10612 or the next vulnerability affects your stack