Juniper patched nine critical flaws in Junos Space

Juniper Networks released patches addressing nearly 220 vulnerabilities across Junos OS, Junos Space, and Security Director, including nine critical flaws in Junos Space. The Junos Space 24.1R4 Patch V1 package fixes 162 vulnerabilities, among them the nine critical issues and 24 cross-site scripting (XSS) bugs.

One of the critical flaws, tracked as CVE-2025-59978 (CVSS 9.0), is an XSS vulnerability in Juniper Networks Junos Space that can allow an attacker to inject script tags into web pages, with scripts executing in the viewer’s administrative privileges and potentially enabling full system control; this affects all Junos Space versions prior to 24.1R4.

Another severe flaw, CVE-2024-47615 (CVSS 8.6), is a GStreamer OOB-write vulnerability that lets an attacker overwrite memory due to an unchecked input array size, fixed in 1.24.10. Juniper notes it is not aware of any attacks in the wild exploiting these vulnerabilities, but recommends applying the patches promptly.