CVE-2025-59997: Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlets pages that, when visited by another user, enable the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59997?
CVE-2025-59997 is considered a high severity vulnerability due to the potential for attackers to execute arbitrary commands.
How do I fix CVE-2025-59997?
To remediate CVE-2025-59997, apply the latest security updates provided by Juniper Networks for Junos Space before version 24.1R4.
What types of attacks can exploit CVE-2025-59997?
CVE-2025-59997 can be exploited through cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Which versions of Junos Space are affected by CVE-2025-59997?
CVE-2025-59997 affects Juniper Networks Junos Space versions up to but not including 24.1R4.
Is user input involved in CVE-2025-59997?
Yes, CVE-2025-59997 involves improper neutralization of user input during web page generation, specifically in CLI Configlets pages.