CVE-2025-59978: Junos Space: Stored cross-site scripting vulnerability in web application
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the target's administrative permissions. This issue affects all versions of Junos Space before 24.1R4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59978?
The severity of CVE-2025-59978 is critical as it allows attackers to execute malicious scripts on affected systems.
How do I fix CVE-2025-59978?
To fix CVE-2025-59978, update to the latest version of Juniper Networks Junos Space beyond 24.1R4, where the vulnerability is patched.
What type of vulnerability is CVE-2025-59978?
CVE-2025-59978 is a Cross-site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation.
Who is affected by CVE-2025-59978?
CVE-2025-59978 affects users of Juniper Networks Junos Space version up to 24.1R4.
What impact does CVE-2025-59978 have on users?
The impact of CVE-2025-59978 can allow attackers to store harmful scripts that can execute commands on the browsers of users who visit the affected web pages.