【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-59978) has been identified in **Juniper Junos Space**. Please verify and apply the necessary patches as soon as possible.

【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-59978) has been identified in Juniper Junos Space. Please verify and apply the necessary patches as soon as possible.

publish date : 2025-10-17 update date : 2025-10-20

Source: Ministry of education information & communication security contingency platform

"" "" ""


Publication Number	TACERT-ANA-2025101710102828	Publication Time	2025/10/17 10:40
Incident Type	ANA-Vulnerability Alert	Discovery Time	2025/10/17 10:40
Impact Level	Medium
[Subject] 【Vulnerability Alert】A high-risk security vulnerability (CVE-2025-59978) has been identified in Juniper Junos Space. Please verify and apply the necessary patches as soon as possible.
[Content] Forwarded from the National Institute of Cyber Security NISAC-200-202510-00000030 Researchers have discovered a stored cross-site scripting (XSS) vulnerability in Juniper Junos Space (CVE-2025-59978). An authenticated remote attacker could exploit this vulnerability to inject malicious scripts into web pages. When a user accesses an affected page, the malicious script will execute in their browser, allowing the attacker to perform unauthorized actions with administrator privileges. Please verify and apply the necessary security patches as soon as possible. Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform] This vulnerability affects Junos Space versions prior to 24.1R4.
[Recommended Actions] The vendor has released official patches for this vulnerability. Please refer to the official advisory for update instructions at the following URL: https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R4-release
[Reference] 1. https://nvd.nist.gov/vuln/detail/CVE-2025-59978 2. https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R4-release

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw

Organizer: Computer Center

Click Num:

Share