Vulnerabilities in Juniper Networks
1,086 resultsCVE-2022-22181HIGHJunos OS: J-Web can be compromised through reflected XSS attacksEPSS 0.7%CVE-2022-22227MEDIUMJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationEPSS 0.7%CVE-2025-52983HIGHJunos OS: After removing ssh public key authentication root can still log inEPSS 0.7%CVE-2022-22219MEDIUMJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentEPSS 0.7%CVE-2020-1629MEDIUMJunos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.EPSS 0.7%CVE-2023-22416HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is receivedEPSS 0.7%CVE-2022-22167HIGHJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policyEPSS 0.7%CVE-2018-0006MEDIUMJunos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejectsEPSS 0.7%CVE-2019-0046MEDIUMJunos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.EPSS 0.7%CVE-2024-30394HIGHJunos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crashEPSS 0.7%CVE-2023-22417HIGHJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crashEPSS 0.7%CVE-2021-31364MEDIUMJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedEPSS 0.7%CVE-2023-22403HIGHJunos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific trafficEPSS 0.7%CVE-2023-22413HIGHJunos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packetsEPSS 0.7%CVE-2022-22157HIGHJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabledEPSS 0.7%CVE-2026-102079HIGHJunos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injectionEPSS 0.7%CVE-2021-0208HIGHJunos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.EPSS 0.7%CVE-2024-47489MEDIUMJunos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the REEPSS 0.7%CVE-2024-39534MEDIUMJunos OS Evolved: Connections to the network and broadcast address acceptedEPSS 0.7%CVE-2023-36843HIGHJunos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabledEPSS 0.7%