Vulnerabilities in Juniper Networks

1,086 results
CVE-2018-0031MEDIUMJunos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rulesEPSS 1.2%CVE-2017-2308—An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to rEPSS 1.2%CVE-2021-0220MEDIUMJunos Space: Shared secrets stored in recoverable format and directly exposed through the UIEPSS 1.2%CVE-2020-1600MEDIUMJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.EPSS 1.2%CVE-2017-2336CRITICALScreenOS: XSS vulnerability in ScreenOS FirewallEPSS 1.2%CVE-2026-103403HIGHSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesEPSS 1.2%CVE-2026-106079HIGHSession Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationEPSS 1.2%CVE-2021-0275HIGHJunos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.EPSS 1.2%CVE-2021-31353HIGHJunos OS and Junos OS Evolved: RPD core upon receipt of specific BGP updateEPSS 1.2%CVE-2017-2325—A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authEPSS 1.2%CVE-2021-31384HIGHJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the serviceEPSS 1.2%CVE-2018-0043HIGHJunos OS: RPD daemon crashes upon receipt of specific MPLS packetEPSS 1.2%CVE-2021-31381MEDIUMSRC Series: A remote attacker sending a specially crafted query may cause the web server to delete filesEPSS 1.2%CVE-2021-0229MEDIUMJunos OS: Receipt of specific packets could lead to Denial of Service in MQTT ServerEPSS 1.2%CVE-2018-0045HIGHJunos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configurationEPSS 1.1%CVE-2018-0057MEDIUMJunos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)EPSS 1.1%CVE-2017-2326—An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allowEPSS 1.1%CVE-2019-0019HIGHBGP packets can trigger rpd crash when BGP tracing is enabled.EPSS 1.1%CVE-2017-2305—On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admiEPSS 1.1%CVE-2021-31380MEDIUMSRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive informationEPSS 1.1%