16.1r3

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-13	CVE-2017-10623	Improper Authentication vulnerability in Juniper Junos Space Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. network high complexity juniper CWE-287	8.1
2017-10-13	CVE-2017-10612	Cross-site Scripting vulnerability in Juniper Junos Space A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. network low complexity juniper CWE-79	8.0