Cross-Site Scripting Vulnerability in Junos Space by Juniper Networks
CVE-2025-59993
5.1MEDIUM
Key Information:
- Vendor
Juniper Networks
- Status
- Vendor
- CVE Published:
- 9 October 2025
Badges
đź‘ľ Exploit Exists
What is CVE-2025-59993?
An improperly handled injection of script tags in the Space Node Setting fields of Junos Space allows an attacker to exploit this vulnerability. When another user visits the affected page, the attacker can execute malicious commands while impersonating the victim’s permissions, including those of an administrator. This issue impacts all versions of Junos Space prior to 24.1R4, highlighting the importance of prompt updates and secure coding practices to mitigate such threats.
Affected Version(s)
Junos Space 0 < 24.1R4