Product:
Junos Space Security Director
Summary
An Improper Neutralization of Input During Web Page Generation vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application. These scripts are stored and executed in the context of other users’ browsers when they access affected pages. This issue affects all versions before 24.1R4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.3 | CVE-2025-59974 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious script and inject it into the application. Once the script is stored, it will execute in the browsers of users who access the affected pages, potentially leading to unauthorized actions or data exposure.
Affected Products
- Junos Space Security Director: All versions before 24.1R4
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Junos Space Security Director that addresses this issue. Additionally, implementing input validation and sanitization measures can help prevent similar vulnerabilities in the future.