CVE-2018-0011: Junos Space: Reflected XSS vulnerability in Junos Space management interface

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-10 · updated 2026-06-17
Weakness: CWE-79

Description

A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.

Affected products

Juniper Networks Junos Space: 13.3-r1, 13.3-r2, 13.3-r4, 14.1-r1, 14.1-r2, 14.1-r3 (+9)

References

http://www.securitytracker.com/id/1040189
https://kb.juniper.net/JSA10838
http://www.securitytracker.com/id/1040189
https://kb.juniper.net/JSA10838

Get alerted when CVE-2018-0011 or the next vulnerability affects your stack