Juniper Junos Space JA1500 Appliance vulnerabilities

5 CVEs affecting Juniper Junos Space JA1500 Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3412, published 2014-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3412, published 2014-05-20. High severity, CVSS 10.0. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors.
CVE-2013-5095, published 2013-08-16. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject…
CVE-2013-5097, published 2013-08-16. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes…
CVE-2013-5096, published 2013-08-16. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify…
CVE-2013-3497, published 2013-05-08. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate…