XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.