JO
Network Security
Junos OS
On CISA KEVExploited in the wild
931
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 392Medium 56Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36845 In wildKEV | 9.8 | Aug 17 | Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable Affected: before 20.4R3-S9; 21.1 before 21.1*; 21.2 before 21.2R3-S7; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +4 more |
| CVE-2020-1631 In wildKEV | 9.8 | May 4 | Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services Affected: 12.3 before 12.3R12-S16; 12.3X48 before 12.3X48-D101, 12.3X48-D105; 14.1X53 before 14.1X53-D54; 15.1 before 15.1R7-S7; 15.1X49 before 15.1X49-D211, 15.1X49-D220; 16.1 before 16.1R7-S8; +12 more |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: before 12.1; 13.1 before 13.2; 12.1; 12.1; 12.1r; 12.1x44; +34 more |
| CVE-2023-36851 In wildKEV | 5.3 | Sep 26 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files Affected: 21.2 before 21.2R3-S8; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; 22.4 before 22.4R2-S2, 22.4R3; +1 more |
| CVE-2023-36846 In wildKEV | 5.3 | Aug 17 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S3; +3 more |
| CVE-2023-36844 In wildKEV | 5.3 | Aug 17 | Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables Affected: before 20.4R3-S9; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +4 more |
| CVE-2023-36847 In wildKEV | 5.3 | Aug 17 | Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S3; +3 more |
| CVE-2025-21590 In wildKEV | 4.4 | Mar 12 | Junos OS: An local attacker with shell access can execute arbitrary code Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more |
Showing 8
The 500 most important CVEs for this product (exploited first, then by severity)