Juniper Junos Space 14.1

Junos Space: Unrestricted file upload vulnerability

Junos Space Security Director: XSS vulnerability in web administration

Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI

Junos Space: Authenticated user able to delete devices without delete device privileges

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1.

Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection

Junos Space: Reflected XSS vulnerability in Junos Space management interface