Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-59981Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection
- CVE-2025-59980Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed
- CVE-2025-59978Junos Space: Stored cross-site scripting vulnerability in web application
- CVE-2025-59976Junos Space: Arbitrary file download vulnerability in web interface
- CVE-2025-59975Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS
- CVE-2025-59974Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability
- CVE-2025-59968Junos Space Security Director: Insufficient authorization for sensitive resources in web interface
- CVE-2025-59967Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts
- CVE-2025-59964Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart
- CVE-2025-59962Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash
- CVE-2025-59958Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE
- CVE-2025-59957Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor
- CVE-2025-52961Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart
- CVE-2025-52960Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash
- CVE-2025-11198Security Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX Server
- CVE-2025-52988Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'
- CVE-2025-6549Junos OS: SRX Series: J-Web can be exposed on additional interfaces
- CVE-2025-52989Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
- CVE-2025-52986Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks
- CVE-2025-52985Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching
- CVE-2025-52984Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes
- CVE-2025-52983Junos OS: After removing ssh public key authentication root can still log in
- CVE-2025-52982Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash
- CVE-2025-52981Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash
- CVE-2025-52980Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message
- CVE-2025-52964Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured
- CVE-2025-52963Junos OS: A low-privileged user can disable an interface
- CVE-2025-52953Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset
- CVE-2025-52952Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash
- CVE-2025-52958Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash