Cross-Site Scripting Vulnerability in Juniper Networks Junos Space
CVE-2025-59995
5.1MEDIUM
Key Information:
- Vendor
Juniper Networks
- Status
- Vendor
- CVE Published:
- 9 October 2025
Badges
👾 Exploit Exists
What is CVE-2025-59995?
A Cross-Site Scripting (XSS) vulnerability exists within Juniper Networks Junos Space, allowing attackers to inject malicious script tags into the Quick Template page. This flaw can be exploited when the page is accessed by another user, potentially enabling attackers to execute arbitrary commands with the privileges of the affected user, including administrative rights. This issue is present in all versions of Junos Space prior to 24.1R4.
Affected Version(s)
Junos Space 0 < 24.1R4