Cross-site Scripting Vulnerability in Juniper Networks Junos Space
CVE-2025-60009
5.1MEDIUM
Key Information:
- Vendor
Juniper Networks
- Status
- Vendor
- CVE Published:
- 9 October 2025
Badges
👾 Exploit Exists
What is CVE-2025-60009?
A Cross-site Scripting vulnerability exists in Juniper Networks' Junos Space, allowing attackers to inject malicious script tags into the CLI Configlet page. When an unsuspecting user visits this page, the injected scripts can execute commands under that user's permissions, potentially compromising sensitive information and administrative privileges. This vulnerability impacts all versions of Junos Space released before version 24.1R4, highlighting the importance of timely updates and robust security measures to safeguard against such risks.
Affected Version(s)
Junos Space 0 < 24.1R4