{"id":"CVE-2017-2307","aliases":["EUVD-2017-11490","GHSA-m4vv-qmvm-gq28"],"status":"published","title":"A reflected cross site scripting vulnerability in the administrative interface of Juniper...","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0085,"percentile":0.58425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2017-05-30T14:00:00Z","modified":"2026-06-17T01:15:55Z","products":[{"vendor":"juniper","product":"junos_space"},{"vendor":"juniper networks","product":"junos space"}],"references":[{"url":"http://www.securityfocus.com/bid/98749","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://kb.juniper.net/JSA10770","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2307"},{"url":"https://github.com/advisories/GHSA-m4vv-qmvm-gq28"}],"sources":{"cve":[{"id":"CVE-2017-2307","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","status":"published","published":"2017-05-30T14:00:00Z","modified":"2024-08-05T13:48:05.388Z","updated_at":"2026-11-02T14:33:15.887816Z"}],"euvd":[{"id":"EUVD-2017-11490","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","status":"published","published":"2017-05-30T14:00:00Z","modified":"2024-08-05T13:48:05Z","updated_at":"2026-11-03T02:39:21.461773Z"}],"ghsa":[{"id":"GHSA-m4vv-qmvm-gq28","title":"A reflected cross site scripting vulnerability in the administrative interface of Juniper...","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","status":"published","published":"2022-05-17T02:42:22Z","modified":"2023-01-27T05:05:50Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:42:46.624086Z"}],"nvd":[{"id":"CVE-2017-2307","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","status":"published","published":"2017-05-30T14:29:00.957Z","modified":"2026-06-17T01:15:55.88Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:49.449157Z"}]}}