Cross-site Scripting Vulnerability in Juniper Networks Junos Space

CVE-2025-59982

What is CVE-2025-59982?

A Cross-site Scripting vulnerability found in Juniper Networks' Junos Space allows attackers to inject malicious script tags into the dashboard's search field. When this compromised search field is accessed by another user, the attacker can execute arbitrary commands with the compromised user's permissions, which may include administrative privileges. This issue affects all versions of Junos Space prior to 24.1R4, posing significant security risks if left unaddressed.

References