JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44182 | 8.8 | Oct 13 | An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +20 more |
| CVE-2023-28983 | 8.8 | Apr 17 | An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged,… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +5 more |
| CVE-2022-22239 | 8.8 | Oct 18 | Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +20 more |
| CVE-2021-31354 | 8.8 | Oct 19 | An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos OS and Junos OS Evolved, configured in… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +30 more |
| CVE-2021-31350 | 8.8 | Oct 19 | An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved, allows a… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +17 more |
| CVE-2021-0208 | 8.8 | Jan 15 | An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when… Affected: 19.3; 19.3; 19.4; 19.4; 19.4; 20.1; +2 more |
| CVE-2020-1632 | 8.6 | Apr 15 | In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to… Affected: 19.2 |
| CVE-2024-47490 | 8.2 | Oct 11 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2023-28960 | 8.2 | Apr 17 | An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +24 more |
| CVE-2026-33788 | 7.8 | Apr 9 | Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2026-33793 | 7.8 | Apr 9 | Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +33 more |
| CVE-2025-52954 | 7.8 | Jul 11 | A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a local, low-privileged user to gain root… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2024-39524 | 7.8 | Jul 11 | An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39523 | 7.8 | Jul 11 | An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39522 | 7.8 | Jul 11 | An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate… Affected: 22.3; 22.3; 22.3; 22.3; 22.4; 22.4 |
| CVE-2024-39521 | 7.8 | Jul 11 | An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate… Affected: 21.1 before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39520 | 7.8 | Jul 11 | An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28966 | 7.8 | Apr 17 | An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +18 more |
| CVE-2021-31359 | 7.8 | Oct 19 | A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon (jdhcpd) process… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2021-31358 | 7.8 | Oct 19 | A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2021-31357 | 7.8 | Oct 19 | A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2021-31356 | 7.8 | Oct 19 | A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2025-60003 | 7.5 | Jan 15 | Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-60004 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash Affected: 23.4; 23.4; 23.4; 24.2; 24.4; 24.4; +2 more |
| CVE-2025-52946 | 7.5 | Jul 11 | A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +25 more |
| CVE-2025-30651 | 7.5 | Apr 9 | A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39564 | 7.5 | Feb 5 | This is a similar, but different vulnerability than the issue reported as CVE-2024-39549 Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21598 | 7.5 | Jan 9 | Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash Affected: 21.4; 21.4; 22.2; 22.3; 22.3; 22.4; +12 more |
| CVE-2025-21599 | 7.5 | Jan 9 | Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service Affected: 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +21 more |
| CVE-2024-47502 | 7.5 | Oct 11 | An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-47499 | 7.5 | Oct 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39525 | 7.5 | Oct 9 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39516 | 7.5 | Oct 9 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39515 | 7.5 | Oct 9 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39552 | 7.5 | Jul 11 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39549 | 7.5 | Jul 11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send… Affected: through 21.1; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39548 | 7.5 | Jul 11 | An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39542 | 7.5 | Jul 11 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600,… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +13 more |
| CVE-2024-39531 | 7.5 | Jul 11 | An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39562 | 7.5 | Jul 10 | A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon (sshd) instances, of Juniper Networks Junos OS Evolved… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +26 more |
| CVE-2024-39555 | 7.5 | Jul 10 | An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30382 | 7.5 | Apr 12 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +27 more |
| CVE-2024-30395 | 7.5 | Apr 12 | An Improper Validation of Specified Type of Input vulnerability in Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30394 | 7.5 | Apr 12 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-21598 | 7.5 | Apr 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21614 | 7.5 | Jan 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: 22.2; 22.2; 22.2; 22.2; 22.2; 22.3; +3 more |
| CVE-2024-21612 | 7.5 | Jan 12 | An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21611 | 7.5 | Jan 12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +13 more |
| CVE-2024-21604 | 7.5 | Jan 12 | An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21602 | 7.5 | Jan 12 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +26 more |