Cross-site Scripting Vulnerability in Junos Space by Juniper Networks

CVE-2025-59987

What is CVE-2025-59987?

A Cross-site Scripting (XSS) vulnerability exists in Junos Space by Juniper Networks, allowing attackers to inject malicious script tags into the arbitrary device search field. When these compromised pages are accessed by other users, the attackers can execute commands with the affected user's permissions, potentially granting administrative control. This vulnerability affects all versions of Junos Space prior to 24.1R4, underscoring the importance of applying the latest security updates to mitigate risk.

References