Vulnerabilities in Juniper Networks

915 results
Vexday analysis

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2023-28975MEDIUMJunos OS: The kernel will crash when certain USB devices are insertedEPSS 0.3%CVE-2019-0042MEDIUMIncorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devicesEPSS 0.3%CVE-2024-30388HIGHJunos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flapsEPSS 0.3%CVE-2026-33782HIGHJunos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logoutsEPSS 0.3%CVE-2024-47506HIGHJunos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crashEPSS 0.3%CVE-2025-52953HIGHJunos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session resetEPSS 0.3%CVE-2019-0073MEDIUMJunos OS: PKI key pairs are exported with insecure file permissionsEPSS 0.3%CVE-2022-22187HIGHJIMS: Local Privilege Escalation vulnerability via repair functionalityEPSS 0.3%CVE-2025-59976HIGHJunos Space: Arbitrary file download vulnerability in web interfaceEPSS 0.3%CVE-2024-21617MEDIUMJunos OS: BGP flap on NSR-enabled devices causes memory leakEPSS 0.3%CVE-2023-22392MEDIUMJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leakEPSS 0.3%CVE-2026-33801HIGHJunos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashesEPSS 0.3%CVE-2025-59958MEDIUMJunos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the REEPSS 0.3%CVE-2025-52987MEDIUMParagon Automation: A clickjacking vulnerability in the web server configuration has been addressedEPSS 0.3%CVE-2024-21613MEDIUMJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crashEPSS 0.3%CVE-2024-21587MEDIUMJunos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabledEPSS 0.3%CVE-2024-30403HIGHJunos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashesEPSS 0.3%CVE-2023-28979MEDIUMJunos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check failsEPSS 0.3%CVE-2025-59981MEDIUMJunos Space: Device Template Definition page is vulnerable to reflected cross-site script injectionEPSS 0.3%CVE-2025-59982MEDIUMJunos Space: Dashboard Search field is vulnerable to reflected cross-site script injectionEPSS 0.3%