JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30652 | 5.5 | Apr 9 | An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39513 | 5.5 | Jul 10 | An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows a local, low-privileged attacker to cause a Denial of… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30406 | 5.5 | Apr 12 | A Cleartext Storage in a File on Disk vulnerability in Juniper Networks Junos OS Evolved ACX Series devices using the Paragon Active Assurance Test Agent software installed on… Affected: 23.1; 23.1; 23.1; 23.1; 23.2; 23.2; +2 more |
| CVE-2023-44201 | 5.5 | Oct 13 | An Incorrect Permission Assignment for Critical Resource vulnerability in a specific file of Juniper Networks Junos OS and Junos OS Evolved allows a local authenticated attacker… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44178 | 5.5 | Oct 13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44177 | 5.5 | Oct 13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44176 | 5.5 | Oct 13 | A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44187 | 5.5 | Oct 11 | An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker with shell access to view passwords… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-36840 | 5.5 | Jul 14 | A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28980 | 5.5 | Apr 17 | A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 21.2; +20 more |
| CVE-2023-22398 | 5.5 | Jan 13 | An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +9 more |
| CVE-2022-22240 | 5.5 | Oct 18 | Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +18 more |
| CVE-2022-22233 | 5.5 | Oct 18 | Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash Affected: 21.4; 21.4; 21.4; 21.4; 22.1 |
| CVE-2022-22215 | 5.5 | Jul 20 | A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module (PAM) of Juniper Networks Junos OS and Junos OS Evolved… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2022-22193 | 5.5 | Apr 14 | An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +7 more |
| CVE-2020-1624 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files Affected: before 19.1r1 |
| CVE-2020-1623 | 5.5 | Apr 8 | A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file Affected: before 19.2r1 |
| CVE-2020-1622 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore Affected: before 19.1r1 |
| CVE-2020-1621 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces Affected: before 19.3r1 |
| CVE-2020-1620 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log Affected: before 19.3r1 |
| CVE-2025-60010 | 5.4 | Oct 9 | A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2024-39534 | 5.4 | Oct 11 | An Incorrect Comparison vulnerability in the local address verification API of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker to create… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2023-44190 | 5.4 | Oct 11 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +33 more |
| CVE-2023-44189 | 5.4 | Oct 11 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +32 more |
| CVE-2026-57029 | 5.3 | Jul 9 | Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash Affected: 23.2; 23.4; 23.4; 23.4; 23.4; 23.4; +25 more |
| CVE-2025-60006 | 5.3 | Oct 9 | Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS Evolved… Affected: 24.2; 24.2; 24.2; 24.2; 24.2; 24.4; +3 more |
| CVE-2025-59962 | 5.3 | Oct 9 | An Access of Uninitialized Pointer vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved with BGP sharding configured allows an… Affected: before 22.3; 22.3; 22.3; 22.3; 22.3; 22.3; +16 more |
| CVE-2025-52985 | 5.3 | Jul 11 | A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to bypass security… Affected: 23.2; 23.4; 23.4; 24.2; 24.4; 24.4; +2 more |
| CVE-2025-52958 | 5.3 | Jul 11 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-21597 | 5.3 | Apr 9 | An Improper Check for Unusual or Exceptional Conditions vulnerability in routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39536 | 5.3 | Jul 11 | A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30402 | 5.3 | Apr 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30390 | 5.3 | Apr 12 | An Improper Restriction of Excessive Authentication Attempts vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +29 more |
| CVE-2024-30386 | 5.3 | Apr 12 | A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30409 | 5.3 | Apr 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in telemetry processing of Juniper Networks Junos OS and Junos OS Evolved allows a network-based… Affected: 22.1; 22.1; 22.1 |
| CVE-2024-21596 | 5.3 | Jan 12 | A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker… Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 21.3; +34 more |
| CVE-2023-44195 | 5.3 | Oct 13 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon (nsagentd) of Juniper Networks Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +33 more |
| CVE-2023-28978 | 5.3 | Apr 17 | An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain confidential… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2022-22227 | 5.3 | Oct 18 | Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +17 more |
| CVE-2022-22164 | 5.3 | Jan 19 | An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected,… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2021-0273 | 5.3 | Apr 22 | An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240,… Affected: 19.4; 19.4 |
| CVE-2025-52989 | 5.1 | Jul 11 | An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2024-39544 | 5.0 | Oct 11 | An Incorrect Default Permissions vulnerability in the command line interface (CLI) of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCONF… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21615 | 5.0 | Apr 12 | An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to access confidential information on the… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2023-36836 | 4.7 | Jul 14 | A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2021-0298 | 4.7 | Oct 19 | A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +5 more |
| CVE-2026-21901 | 4.4 | Jul 9 | Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash Affected: 22.3; 22.3; 22.3; 22.3; 22.3; 22.3; +34 more |
| CVE-2026-33799 | 4.3 | Jul 9 | Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |