Cross-Site Scripting Vulnerability in Junos Space by Juniper Networks

CVE-2025-59993

What is CVE-2025-59993?

An improperly handled injection of script tags in the Space Node Setting fields of Junos Space allows an attacker to exploit this vulnerability. When another user visits the affected page, the attacker can execute malicious commands while impersonating the victim’s permissions, including those of an administrator. This issue impacts all versions of Junos Space prior to 24.1R4, highlighting the importance of prompt updates and secure coding practices to mitigate such threats.

References