1. Home
  2. CVE Database
  3. CVE-2025-59974
HIGH · 8.4

CVE-2025-59974

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the applicati...

Vulnerability Description

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the application, which are then stored and executed in the context of other users' browsers when they access affected pages.This issue affects Juniper Security Director:  * All versions before 24.1R4.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
JuniperSpace Security Director< 24.1

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2025-59974?

CVE-2025-59974 is a vulnerability with a CVSS score of 8.4 (HIGH). An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to inject malicious scripts into the applicati...

How severe is CVE-2025-59974?

CVE-2025-59974 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-59974?

Check the references section above for vendor advisories and patch information. Affected products include: Juniper Space Security Director.