Skip to content
OpenAdvisories

Vendor

Juniper Networks

1,090 known vulnerabilities.

Products

Junos OS 824 Junos OS Evolved 376 Junos Space 49 NorthStar Controller Application 19 Session Smart Router 18 Juniper ATP 12 Session Smart Conductor 12 ScreenOS 7 Paragon Active Assurance 5 Contrail Service Orchestration 5 Junos Space Security Director 3 MIST Cloud UI 3 SRC Series 3 Contrail 2 SBR Carrier 2 JSI LWC 2 128 Technology Session Smart Router 1 Juniper Security Director 1 Contrail Networking 1 Contrail Cloud 1 Contrail Insights 1 CTPView 1 WAN Assurance Managed Router 1 Junos 1 WAN Assurance Router 1 JATP 1 Paragon Automation (Pathfinder, Planner, Insights) 1 Paragon Active Assurance (Formerly Netrounds) 1 Service Insight 1 Junos OS with BGP enabled 1 Service Now 1 Apstra 1 juniper/libslax 1 Junos Snapshot Administrator (JSNAPy) 1 Junos OS on SRX Series Services Gateways chassis cluster 1 AppID Service Sigpack 1 JDPI-Decoder Engine 1 Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options 1 Junos OS with DHCPv6 enabled 1 Security Director Policy Enforcer 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-36846 Exploited Public exploit EPSS 93%

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 6.5
    CVE-2020-1611 Public exploit

    Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.

    A Local File Inclusion vulnerability in Juniper Networks Junos Space allows an attacker to view all files on the target when the device receives malicious HTTP packets. This issue affects: Juniper Networks Junos Space versions prior to 19.4R1.

    Juniper Networks Junos Space Network devices
  • Medium 5.0
    CVE-2017-10617 Public exploit

    Contrail: XML External Entity (XXE) vulnerability

    The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 pri…

    Juniper Networks Contrail Network devices