[ Vendor · 9 CVEs ]
Juniper
CVEs affecting Juniper published in the last 30 days, plus any Juniper CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-21590 | 12 Mar 2025 | CVSS 4.4 | Juniper Junos OS Improper Isolation or CompartmentalizationAn Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges… | Exploited |
| CVE-2023-36851 | 27 Sep 2023 | CVSS 5.3 | Juniper Junos OS SRX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36844 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS EX Series PHP External Variable ModificationA PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36845 | 17 Aug 2023 | CVSS 9.8 | Juniper Junos OS EX Series and SRX Series PHP External Variable ModificationA PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated… | Exploited |
| CVE-2023-36846 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS SRX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2023-36847 | 17 Aug 2023 | CVSS 5.3 | Juniper Junos OS EX Series Missing Authentication for Critical FunctionA Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based… | Exploited |
| CVE-2020-1631 | 4 May 2020 | CVSS 9.8 | Juniper Junos OS Path TraversalA vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with… | Exploited |
| CVE-2015-7755 | 19 Dec 2015 | CVSS 9.8 | Juniper ScreenOS Improper AuthenticationJuniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before… | Exploited |
| CVE-2015-5477 | 29 Jul 2015 | CVSS 7.5 | Crafted TKEY queries crash ISC BIND DNS serversnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and… | ExploitedFix |