Juniper Junos OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
291 matching records
- Medium6.9An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to fiCheck if you run itEPSS 0.29%Oct 9, 2025
- High7.1An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access anyCheck if you run itEPSS 0.29%Oct 9, 2025
- High8.7An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device wCheck if you run itEPSS 0.41%Oct 9, 2025
- High7.7A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the webCheck if you run itEPSS 0.30%Oct 9, 2025
- High7.1A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACCheck if you run itEPSS 0.20%Oct 9, 2025
- High8.7A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attackeCheck if you run itEPSS 0.36%Oct 9, 2025
- Medium6.0An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an attacCheck if you run itEPSS 0.18%Oct 9, 2025
- Medium6.9An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticCheck if you run itEPSS 0.28%Oct 9, 2025
- High7.0An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker withCheck if you run itEPSS 0.18%Oct 9, 2025
- High7.1An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management Manager (cfmman) of Juniper Networks JunoCheck if you run itEPSS 0.48%Oct 9, 2025
- High8.5A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legiCheck if you run itEPSS 0.27%Oct 9, 2025
- Medium6.9An Incorrect Authorization vulnerability in the web server of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to reach the Juniper Web DevCheck if you run itEPSS 0.24%Jul 11, 2025
- Medium6.9A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security rCheck if you run itEPSS 0.30%Jul 11, 2025
- High7.1A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to causCheck if you run itEPSS 0.30%Jul 11, 2025
- Medium6.8An Improper Access Control vulnerability in the User Interface (UI) of Juniper Networks Junos OS allows a local, low-privileged attacker to bring down an interface, leading to a DeCheck if you run itEPSS 0.16%Jul 11, 2025
- High7.1An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sendCheck if you run itEPSS 0.33%Jul 11, 2025
- High7.1An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on MX Series with MPC-BUILTIN, MPC1 through MPC9 line cards alloCheck if you run itEPSS 0.31%Jul 11, 2025
- Medium6.0A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a DCheck if you run itEPSS 0.25%Jul 11, 2025
- High7.1An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attaCheck if you run itEPSS 0.32%Jul 11, 2025
- High7.1An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacCheck if you run itEPSS 0.32%Jul 11, 2025
- High8.2An Improper Handling of Exceptional Conditions vulnerability in Berkeley Packet Filter (BPF) processing of Juniper Networks Junos OS allows an attacker, in rare cases, sending specCheck if you run itEPSS 0.50%Jul 11, 2025
- High7.1An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specific end-of-life (EOL) ACX Series platforms allows an attackerCheck if you run itEPSS 0.30%Jul 11, 2025
- High8.7A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update withCheck if you run itEPSS 0.52%Jul 11, 2025
- Medium6.7Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityPatch nowKEVEPSS 1.75%Mar 12, 2025
- Medium6.1Juniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jan 25, 2024