{"id":"CVE-2018-0047","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-0047","generatedAt":"2026-10-28T21:19:29.533Z","title":"A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts.","description":"A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security Director web interface. This issue affects all versions of Juniper Networks Junos Space Security Director prior to 17.2R2.","published":"2018-10-10T18:29:02.000Z","lastModified":"2026-06-17T01:29:29.000Z","status":"Modified","sourceIdentifier":"sirt@juniper.net","cvss":{"version":"3.0","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["juniper/junos space"],"epss":{"score":0.00862,"percentile":0.58389,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.86%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securitytracker.com/id/1041863","tags":["Third Party Advisory","VDB Entry"],"source":"sirt@juniper.net"},{"url":"https://kb.juniper.net/JSA10881","tags":["Vendor Advisory"],"source":"sirt@juniper.net"},{"url":"http://www.securitytracker.com/id/1041863","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.juniper.net/JSA10881","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-0047","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}