CVE-2025-59974

juniper space security director

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-59974

Katalog CVE

CVSS 8.4 · High EPSS 0,38%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada juniper space security director. Skor CVSS 3.1 8.4 (High) menurut juniper.net.

Deskripsi (NVD)

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director:  * All versions before 24.1R4.

Rincian

Terbit di NVD
9 Oktober 2025
Terakhir diubah
8 Oktober 2026
Status NVD
Analyzed
CVSS 3.1
8.4 (High), sumber juniper.net
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,38% peluang dieksploitasi; lebih tinggi dari 30,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
juniper space security director Semua versi sebelum 24.1
juniper space security director Versi 24.1 r1
juniper space security director Versi 24.1 r2
juniper space security director Versi 24.1 r3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 00:26 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.