CVE-2017-10612

Junos Space: Persistent Cross site scripting in Junos Space

High · published October 13, 2017

CVSS v3.0
8.0
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01289 · 70.0th percentile
Published
2017-10-13T17:00Z
EPSS history
Timeline
  • 13 OCT 17:00Z
    Junos Space: Persistent Cross site scripting in Junos Space
    cvelistv5