Vulnerabilities > Juniper > Junos Space > 1.1

DATE CVE VULNERABILITY TITLE RISK
2021-01-15 CVE-2021-0220 Insufficiently Protected Credentials vulnerability in Juniper Junos Space
The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI.
network
juniper CWE-522
3.5
2017-10-13 CVE-2017-10623 Improper Authentication vulnerability in Juniper Junos Space
Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes.
network
juniper CWE-287
6.8
2017-10-13 CVE-2017-10612 Cross-site Scripting vulnerability in Juniper Junos Space
A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators.
network
juniper CWE-79
6.0
2017-10-13 CVE-2016-1265 Cross-Site Request Forgery (CSRF) vulnerability in Juniper Junos Space
A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors.
network
low complexity
juniper CWE-352
7.5
2017-05-30 CVE-2017-2311 Denial of Service vulnerability in Juniper Junos Space
On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition.
network
low complexity
juniper
5.0
2017-05-30 CVE-2017-2309 Information Exposure vulnerability in Juniper Junos Space
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network.
network
juniper CWE-200
4.3
2017-05-30 CVE-2017-2308 XXE vulnerability in Juniper Junos Space
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device.
network
low complexity
juniper CWE-611
5.0
2017-05-30 CVE-2017-2306 Incorrect Authorization vulnerability in Juniper Junos Space
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
network
low complexity
juniper CWE-863
6.5
2017-05-30 CVE-2017-2305 Incorrect Authorization vulnerability in Juniper Junos Space
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation.
network
low complexity
juniper CWE-863
6.5
2015-07-16 CVE-2015-2620 Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges. 4.3