Juniper Networks Patches Critical Junos Space Vulnerabilities

SecurityWeek reports that Juniper Networks has issued patches for nearly 220 vulnerabilities across Junos OS, Junos Space and Security Director, including nine critical-severity flaws in Junos Space. According to SecurityWeek, Junos Space version 24.1R4 was released with fixes for 24 cross-site scripting issues, notably CVE-2025-59978 (CVSS 9.0) which could allow an attacker to store script tags on text pages and execute commands with administrative privileges.

The 24.1R4 Patch V1 update addresses 162 CVEs, among them the nine critical ones: CVE-2019-12900, CVE-2023-38408, CVE-2024-3596, CVE-2024-27280, CVE-2024-35845, CVE-2024-47538, CVE-2024-47607, and CVE-2024-47615. Juniper also fixed a high-severity DoS vulnerability and several medium-severity flaws in Junos Space and Junos Space Security Director, alongside fixes for two high-severity DoS defects in Junos OS and Junos OS Evolved.

While Juniper states it is not aware of these vulnerabilities being exploited in the wild, users are urged to apply patches promptly as there are limited workarounds. These advisories were published as part of the company’s quarterly schedule, with additional details available on Juniper’s support portal, and were noted in SecurityWeek on 10 October 2025.