Skip to content
OpenAdvisories

Vendor

Juniper Networks

1,090 known vulnerabilities.

Products

Junos OS 824 Junos OS Evolved 376 Junos Space 49 NorthStar Controller Application 19 Session Smart Router 18 Juniper ATP 12 Session Smart Conductor 12 ScreenOS 7 Paragon Active Assurance 5 Contrail Service Orchestration 5 Junos Space Security Director 3 MIST Cloud UI 3 SRC Series 3 Contrail 2 SBR Carrier 2 JSI LWC 2 128 Technology Session Smart Router 1 Juniper Security Director 1 Contrail Networking 1 Contrail Cloud 1 Contrail Insights 1 CTPView 1 WAN Assurance Managed Router 1 Junos 1 WAN Assurance Router 1 JATP 1 Paragon Automation (Pathfinder, Planner, Insights) 1 Paragon Active Assurance (Formerly Netrounds) 1 Service Insight 1 Junos OS with BGP enabled 1 Service Now 1 Apstra 1 juniper/libslax 1 Junos Snapshot Administrator (JSNAPy) 1 Junos OS on SRX Series Services Gateways chassis cluster 1 AppID Service Sigpack 1 JDPI-Decoder Engine 1 Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options 1 Junos OS with DHCPv6 enabled 1 Security Director Policy Enforcer 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-21590 Exploited

    Junos OS: An local attacker with shell access can execute arbitrary code

    An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrar…

    Juniper Networks Junos OS Network devices
    KEV Mar 13, 2025
  • Medium 5.3
    CVE-2023-36851 Exploited

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php th…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36846 Exploited Public exploit EPSS 93%

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Critical 9.8
    CVE-2023-36845 Exploited Public exploit Scanner template EPSS 95%

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36847 Exploited EPSS 83%

    Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php tha…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • High 8.8
    CVE-2020-1631 Exploited

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI)…

    Juniper Networks Junos OS Network devices
    KEV Mar 25, 2022