Skip to content
OpenAdvisories

Vendor

Juniper Networks

1,090 known vulnerabilities.

Products

Junos OS 824 Junos OS Evolved 376 Junos Space 49 NorthStar Controller Application 19 Session Smart Router 18 Juniper ATP 12 Session Smart Conductor 12 ScreenOS 7 Paragon Active Assurance 5 Contrail Service Orchestration 5 Junos Space Security Director 3 MIST Cloud UI 3 SRC Series 3 Contrail 2 SBR Carrier 2 JSI LWC 2 128 Technology Session Smart Router 1 Juniper Security Director 1 Contrail Networking 1 Contrail Cloud 1 Contrail Insights 1 CTPView 1 WAN Assurance Managed Router 1 Junos 1 WAN Assurance Router 1 JATP 1 Paragon Automation (Pathfinder, Planner, Insights) 1 Paragon Active Assurance (Formerly Netrounds) 1 Service Insight 1 Junos OS with BGP enabled 1 Service Now 1 Apstra 1 juniper/libslax 1 Junos Snapshot Administrator (JSNAPy) 1 Junos OS on SRX Series Services Gateways chassis cluster 1 AppID Service Sigpack 1 JDPI-Decoder Engine 1 Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options 1 Junos OS with DHCPv6 enabled 1 Security Director Policy Enforcer 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-21902 Public exploit EPSS 18%

    Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

    An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root. The On-Box Anomaly d…

    Juniper Networks Junos OS Evolved Network devices
  • Medium 5.3
    CVE-2023-36846 Exploited Public exploit EPSS 93%

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Critical 9.8
    CVE-2023-36845 Exploited Public exploit Scanner template EPSS 95%

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 6.5
    CVE-2020-1611 Public exploit

    Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

    A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

    Juniper Networks Junos Space Network devices
  • High 7.8
    CVE-2019-0053 Public exploit

    Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow

    Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of envir…

    Juniper Networks Junos OS inetutils inetutils Network devices Debian Ubuntu
  • Medium 5.0
    CVE-2017-10617 Public exploit

    Contrail: XML External Entity (XXE) vulnerability

    The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 pri…

    Juniper Networks Contrail Network devices