Juniper Junos Space Virtual Appliance vulnerabilities

4 CVEs affecting Juniper Junos Space Virtual Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5097, published 2013-08-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5095, published 2013-08-16. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject…
CVE-2013-5097, published 2013-08-16. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes…
CVE-2013-5096, published 2013-08-16. Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days. Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify…
CVE-2013-3497, published 2013-05-08. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a configuration tab, which makes it easier for physically proximate…