Vulnerabilidades en Juniper Networks

915 resultados
Análisis Vexday

Com 893 CVEs catalogadas e 7 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração de dispositivos Juniper Networks está 1,7× acima da média geral do catálogo, o que indica risco operacional elevado para organizações que dependem dessas soluções. A CVE mais crítica em exploração ativa no momento é CVE-2023-36846, com escore EPSS de 0,9421 — valor que sinaliza altíssima probabilidade de exploração em curto prazo e deve concentrar esforços imediatos de remediação. O tipo de falha mais recorrente, CWE-754 (verificação inadequada de condições excepcionais), aponta para uma fragilidade estrutural de tratamento de erros que tende a se manifestar em múltiplos componentes. Com 38 CVEs de severidade crítica, 4 com prova de conceito pública disponível e 27 vulnerabilidades surgidas nos últimos 90 dias, o ritmo de exposição recente exige monitoramento contínuo e priorização ativa de patches.

CVE-2025-59999MEDIUMJunos Space: API Access Profiles page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2022-22189HIGHContrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authenticationEPSS 0.2%CVE-2021-0238MEDIUMJunos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk spaceEPSS 0.2%CVE-2025-30648HIGHJunos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crashEPSS 0.2%CVE-2019-0069MEDIUMJunos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear textEPSS 0.2%CVE-2026-21919HIGHJunos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailabilityEPSS 0.2%CVE-2024-39527MEDIUMJunos OS: SRX Series: Low privileged user able to access sensitive information on file systemEPSS 0.2%CVE-2024-39536MEDIUMJunos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leakEPSS 0.2%CVE-2026-57031MEDIUMJunos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effectEPSS 0.2%CVE-2025-59986MEDIUMJunos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59984MEDIUMJunos Space: Global Search is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59996MEDIUMJunos Space: Configuration View page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59988MEDIUMJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59992MEDIUMJunos Space: Secure Console page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-60000MEDIUMJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59998MEDIUMJunos Space: Archive Logs screen is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59995MEDIUMJunos Space: Template creation through Definition is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59990MEDIUMJunos Space: Template creation pages are vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59994MEDIUMJunos Space: Quick Template page is vulnerable to reflected cross-site script injectionEPSS 0.2%CVE-2025-59997MEDIUMJunos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injectionEPSS 0.2%