Juniper Networks CVEs
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-0021Junos OS: Short MacSec keys may allow man-in-the-middle attacks.
- CVE-2018-0020Junos OS: rpd daemon cores due to malformed BGP UPDATE packet
- CVE-2018-0019Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).
- CVE-2018-0018SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.
- CVE-2018-0017SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT
- CVE-2018-0016Junos OS: Kernel crash upon receipt of crafted CLNP datagrams
- CVE-2018-0015AppFormix: Debug Shell Command Execution in AppFormix Agent
- CVE-2018-0014ScreenOS: Etherleak vulnerability found on ScreenOS device
- CVE-2018-0013Junos Space: Local File Inclusion Vulnerability
- CVE-2018-0012Junos Space: Local privilege escalation vulnerability in Junos Space
- CVE-2018-0011Junos Space: Reflected XSS vulnerability in Junos Space management interface
- CVE-2018-0009SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.
- CVE-2018-0008Junos OS: commit script may allow unauthenticated root login upon reboot
- CVE-2018-0006Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects
- CVE-2018-0005Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.
- CVE-2018-0004Junos OS: Kernel Denial of Service Vulnerability
- CVE-2018-0003Junos OS: A crafted MPLS packet may lead to a kernel crash
- CVE-2018-0002MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.
- CVE-2018-0001Junos: Unauthenticated Remote Code Execution through J-Web interface
- CVE-2017-10624Junos Space: Insufficient verification of node certificates.
- CVE-2017-10623Junos Space: Insufficient verification of cluster messages
- CVE-2017-10622Junos Space: Authentication bypass vulnerability
- CVE-2017-10621Junos OS: Denial of service vulnerability in telnetd
- CVE-2017-10620SRX Series: Antivirus updates are downloaded without verification
- CVE-2017-10619Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets
- CVE-2017-10618Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes
- CVE-2017-10617Contrail: XML External Entity (XXE) vulnerability
- CVE-2017-10616Contrail: hard coded credentials
- CVE-2017-10615Junos: Potential remote code execution vulnerability in PAM
- CVE-2017-10614Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd