CVE-2025-59974: Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director:
All versions before 24.1R4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Junos Space Security Directorto a version that resolves this vulnerability.Fixed in 24.1R4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59974?
CVE-2025-59974 has a high severity due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2025-59974?
To fix CVE-2025-59974, update to a version of Junos Space Security Director that is beyond 24.1R4.
What kind of vulnerability is CVE-2025-59974?
CVE-2025-59974 is a Cross-site Scripting (XSS) vulnerability that allows for the injection of malicious scripts.
Who is affected by CVE-2025-59974?
CVE-2025-59974 affects users of Juniper Security Director versions up to 24.1R4.
What impact can CVE-2025-59974 have on users?
CVE-2025-59974 can lead to malicious scripts being executed in the context of other users' browsers, compromising their data.