Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-22391Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)
- CVE-2022-22184Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
- CVE-2022-22251cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges
- CVE-2022-22250Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote
- CVE-2022-22249Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain
- CVE-2022-22248Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands
- CVE-2022-22247Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)
- CVE-2022-22246Junos OS: PHP file inclusion vulnerability in J-Web
- CVE-2022-22245Junos OS: Path traversal vulnerability in J-Web
- CVE-2022-22244Junos OS: Unauthenticated XPath Injection vulnerability in J-Web
- CVE-2022-22243Junos OS: XPath Injection vulnerability in J-Web
- CVE-2022-22242Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web
- CVE-2022-22241Junos OS: Vulnerability in J-Web may allow deserialization without authentication
- CVE-2022-22240Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario
- CVE-2022-22239Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation
- CVE-2022-22238Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed
- CVE-2022-22237Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally
- CVE-2022-22236Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash
- CVE-2022-22235Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed
- CVE-2022-22234Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy
- CVE-2022-22233Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash
- CVE-2022-22232SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash
- CVE-2022-22231SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash
- CVE-2022-22230Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs
- CVE-2022-22229Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration
- CVE-2022-22228Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet
- CVE-2022-22227Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization
- CVE-2022-22226Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash
- CVE-2022-22225Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash
- CVE-2022-22224Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV