Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-05	CVE-2014-3413	Use of Hard-coded Credentials vulnerability in Juniper Junos Space 13.3 The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access. network low complexity juniper CWE-798 critical	9.8
2017-10-13	CVE-2016-1265	Information Exposure vulnerability in Juniper Junos Space A remote unauthenticated network based attacker with access to Junos Space may execute arbitrary code on Junos Space or gain access to devices managed by Junos Space using cross site request forgery (CSRF), default authentication credentials, information leak and command injection attack vectors. network low complexity juniper CWE-200 critical	9.8
2017-10-13	CVE-2017-10622	Improper Authentication vulnerability in Juniper Junos Space 16.1/17.1 An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. network low complexity juniper CWE-287 critical	9.8
2017-03-20	CVE-2016-4926	Improper Authentication vulnerability in Juniper Junos Space Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication. network low complexity juniper CWE-287 critical	9.8