{"id":"CVE-2017-10612","aliases":["EUVD-2017-2259","GHSA-j8cv-m38f-wj28"],"status":"published","title":"Junos Space: Persistent Cross site scripting in Junos Space","description":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.","severity":{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01289,"percentile":0.70409,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2017-10-13T17:00:00Z","modified":"2026-06-17T01:00:26Z","products":[{"vendor":"juniper","product":"junos_space"},{"vendor":"juniper networks","product":"junos space"}],"references":[{"url":"https://kb.juniper.net/JSA10826","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101256","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10612"},{"url":"https://github.com/advisories/GHSA-j8cv-m38f-wj28"}],"sources":{"cve":[{"id":"CVE-2017-10612","title":"Junos Space: Persistent Cross site scripting in Junos Space","description":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.","status":"published","published":"2017-10-13T17:00:00Z","modified":"2024-09-17T02:26:17.415Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:13.27226Z"}],"euvd":[{"id":"EUVD-2017-2259","description":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.","status":"published","published":"2017-10-13T17:00:00Z","modified":"2024-09-17T02:26:17Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:40.896027Z"}],"ghsa":[{"id":"GHSA-j8cv-m38f-wj28","title":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can...","description":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.","status":"published","published":"2022-05-13T01:38:21Z","modified":"2023-02-01T05:09:16Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:50:56.168791Z"}],"nvd":[{"id":"CVE-2017-10612","description":"A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.","status":"published","published":"2017-10-13T17:29:00.643Z","modified":"2026-06-17T01:00:26.73Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:03.426231Z"}]}}