CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-59974

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director: * All versions before 24.1R4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.3%

CVSS Severity

CVSS v3 Score 8.4

References

https://supportportal.juniper.net/JSA103139

Products affected by CVE-2025-59974

Juniper » Space Security Director » Version: 16.1r1

cpe:2.3:a:juniper:space_security_director:16.1r1
Juniper » Space Security Director » Version: 16.2r1

cpe:2.3:a:juniper:space_security_director:16.2r1
Juniper » Space Security Director » Version: 17.1r1

cpe:2.3:a:juniper:space_security_director:17.1r1
Juniper » Space Security Director » Version: 17.1r2

cpe:2.3:a:juniper:space_security_director:17.1r2
Juniper » Space Security Director » Version: 17.2r1

cpe:2.3:a:juniper:space_security_director:17.2r1
Juniper » Space Security Director » Version: 17.2r2

cpe:2.3:a:juniper:space_security_director:17.2r2
Juniper » Space Security Director » Version: 18.1r1

cpe:2.3:a:juniper:space_security_director:18.1r1
Juniper » Space Security Director » Version: 18.1r2

cpe:2.3:a:juniper:space_security_director:18.1r2
Juniper » Space Security Director » Version: 18.2r1

cpe:2.3:a:juniper:space_security_director:18.2r1
Juniper » Space Security Director » Version: 24.1

cpe:2.3:a:juniper:space_security_director:24.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-59974

Products

Pricing

Contact Us