{"api_version":"1","generated_at":"2026-07-23T08:26:37+00:00","cve":"CVE-2017-2307","urls":{"html":"https://cve.report/CVE-2017-2307","api":"https://cve.report/api/cve/CVE-2017-2307.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-2307","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-2307"},"summary":{"title":"CVE-2017-2307","description":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","state":"PUBLISHED","assigner":"juniper","published_at":"2017-05-30 14:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-79","reflected cross site scripting vulnerability"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/98749","name":"http://www.securityfocus.com/bid/98749","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Juniper Junos Space CVE-2017-2307 Cross Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://kb.juniper.net/JSA10770","name":"https://kb.juniper.net/JSA10770","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"2017-01 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 16.1R1 release. - Juniper Networks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2307","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2307","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Juniper Networks","product":"Junos Space","version":"affected versions prior to 16.1R1","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"2307","vulnerable":"1","versionEndIncluding":"15.2","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"junos_space","cpe6":"*","cpe7":"r2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T13:48:05.388Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"98749","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/98749"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kb.juniper.net/JSA10770"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Junos Space","vendor":"Juniper Networks","versions":[{"status":"affected","version":"versions prior to 16.1R1"}]}],"datePublic":"2017-01-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space."}],"problemTypes":[{"descriptions":[{"description":"reflected cross site scripting vulnerability","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-05-31T09:57:01.000Z","orgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","shortName":"juniper"},"references":[{"name":"98749","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/98749"},{"tags":["x_refsource_CONFIRM"],"url":"https://kb.juniper.net/JSA10770"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"sirt@juniper.net","ID":"CVE-2017-2307","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Junos Space","version":{"version_data":[{"version_value":"versions prior to 16.1R1"}]}}]},"vendor_name":"Juniper Networks"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"reflected cross site scripting vulnerability"}]}]},"references":{"reference_data":[{"name":"98749","refsource":"BID","url":"http://www.securityfocus.com/bid/98749"},{"name":"https://kb.juniper.net/JSA10770","refsource":"CONFIRM","url":"https://kb.juniper.net/JSA10770"}]}}}},"cveMetadata":{"assignerOrgId":"8cbe9d5a-a066-4c94-8978-4b15efeae968","assignerShortName":"juniper","cveId":"CVE-2017-2307","datePublished":"2017-05-30T14:00:00.000Z","dateReserved":"2016-12-01T00:00:00.000Z","dateUpdated":"2024-08-05T13:48:05.388Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-05-30 14:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-79","reflected cross site scripting vulnerability"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos_space:*:r2:*:*:*:*:*:*","versionEndIncluding":"15.2","matchCriteriaId":"A7488EE2-FC9D-46AF-89E7-D2942EA697C7"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"2307","Ordinal":"1","Title":"CVE-2017-2307","CVE":"CVE-2017-2307","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"2307","Ordinal":"1","NoteData":"A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space.","Type":"Description","Title":"CVE-2017-2307"},{"CveYear":"2017","CveId":"2307","Ordinal":"2","NoteData":"2017-05-30","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"2307","Ordinal":"3","NoteData":"2017-05-31","Type":"Other","Title":"Modified"}]}}}