Juniper Junos Space vulnerabilities

Unspecified vulnerability in Juniper Junos Space before version 13.3R1.8 that allows remote attackers to execute arbitrary commands when the firewall is disabled.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the API Access Profiles page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Device Discovery page that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator. This issue affects all versions of Junos Space before 24.1R4.

Uncontrolled resource consumption in the HTTP daemon of Juniper Networks Junos Space allows an unauthenticated attacker to flood the system with API calls, leading to denial of service (DoS). After continuous flooding, all file handles are consumed, blocking SSH and web UI access. A manual reboot is required.