CVE-2025-59978CRITICAL 9.0EPSS p42.1%

CVE-2025-59978CVE-2025-59978

Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to store script tags directly in web pages that, when viewed by another user, enable the attacker to execute commands with the target's administrative permissions. This issue affects all versions of Junos Space before 24.1R4.

Scoring

CVSS 3.19.0 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS0.56% probability of exploitation · percentile 42.1% · 2026-06-19T12:03:05Z
Published2025-10-09
Last modified2026-01-23

Underlying weaknesses· 1

CWE-79

References

  1. https://supportportal.juniper.net/JSA103140

1

TypeTargetConfidenceTier
WeaknessImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')cwe-790%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-59974
CVE
CVE-2025-59968
CVE
CVE-2025-52950
CVE
CVE-2025-47977
CVE
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
CVE
CVE-2025-52436
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.