CPE Details
Juniper Junos Space 17.1 R1
17.1
2018-01-29
16h54 +00:00
16h54 +00:00
2021-04-15
13h49 +00:00
13h49 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:juniper:junos_space:17.1:r1:*:*:*:*:*:*
Informations
Vendor
juniperProduct
junos_spaceVersion
17.1Update
r1Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1. | 6.5 |
Medium |
||
| The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1. | 8.8 |
High |
||
| A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device. | 5.4 |
Medium |
