Cross-Site Scripting Vulnerability in Juniper Networks Junos Space

CVE-2025-59989

What is CVE-2025-59989?

A Cross-Site Scripting (XSS) vulnerability in Juniper Networks' Junos Space allows attackers to inject malicious script tags into the Device Discovery page. When another user loads this page, the injected scripts can execute commands in the context of that user's session, potentially granting the attacker elevated privileges, including administrative access. This vulnerability affects all versions of Junos Space prior to 24.1R4. Proper input validation and output encoding are essential to mitigate this risk.

References