Security Advisory

CVE-2025-59978

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-09 16:02:59
Last updated 2026-02-26 17:47:56
Assigner juniper
State PUBLISHED

Description

An Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the targets administrative permissions. This issue affects all versions of Junos Space before 24.1R4.