Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-0026Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration
- CVE-2019-0025Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu
- CVE-2019-0024Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu
- CVE-2019-0023Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu
- CVE-2019-0022Juniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.
- CVE-2019-0021Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text
- CVE-2019-0020Juniper ATP: Hard coded credentials used in Web Collector
- CVE-2019-0018Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu
- CVE-2019-0017Junos Space: Unrestricted file upload vulnerability
- CVE-2019-0016Junos Space: Authenticated user able to delete devices without delete device privileges
- CVE-2019-0015Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot
- CVE-2019-0014Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet
- CVE-2019-0013Junos OS: RPD crash upon receipt of malformed PIM packet
- CVE-2019-0012Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message
- CVE-2019-0011Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)
- CVE-2019-0010Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service
- CVE-2019-0009Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE
- CVE-2019-0007Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability
- CVE-2019-0006Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration
- CVE-2019-0004Juniper ATP: API and device keys are logged in a world-readable permissions file
- CVE-2019-0003Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.
- CVE-2019-0002Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
- CVE-2019-0001Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).
- CVE-2018-0063Junos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface
- CVE-2018-0062Junos OS: Denial of Service in J-Web
- CVE-2018-0061Junos OS: Denial of service in telnetd
- CVE-2018-0060Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash
- CVE-2018-0059ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2018-0058MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service
- CVE-2018-0057Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)