Cross-Site Scripting Vulnerability in Juniper Networks Junos Space

CVE-2025-59994

What is CVE-2025-59994?

A vulnerability in Juniper Networks' Junos Space allows attackers to exploit improper input neutralization during web page generation. By injecting malicious script tags into the Quick Template page, an attacker can execute arbitrary commands under the authority of the targeted user, potentially compromising sensitive information and administrative controls. This vulnerability affects all versions of Junos Space prior to 24.1R4, emphasizing the need for users to upgrade to ensure security.

References