{"id":"CVE-2019-0016","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-0016","generatedAt":"2026-10-28T19:19:23.216Z","title":"A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user.","description":"A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","published":"2019-01-15T21:29:01.000Z","lastModified":"2026-06-17T02:07:31.000Z","status":"Modified","sourceIdentifier":"sirt@juniper.net","cvss":{"version":"3.0","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},"cwe":[],"affected":["juniper/junos space"],"epss":{"score":0.00926,"percentile":0.60302,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.93%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://kb.juniper.net/JSA10917","tags":["Vendor Advisory"],"source":"sirt@juniper.net"},{"url":"https://kb.juniper.net/JSA10917","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-0016","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}