JO
Network Security
Junos OS
On CISA KEVExploited in the wild
931
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 392Medium 56Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36851 In wildKEV | 5.3 | Sep 26 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files Affected: 21.2 before 21.2R3-S8; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; 22.4 before 22.4R2-S2, 22.4R3; +1 more |
| CVE-2023-36846 In wildKEV | 5.3 | Aug 17 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S3; +3 more |
| CVE-2023-36844 In wildKEV | 5.3 | Aug 17 | Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables Affected: before 20.4R3-S9; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +4 more |
| CVE-2023-36847 In wildKEV | 5.3 | Aug 17 | Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S3; +3 more |
| CVE-2025-21590 In wildKEV | 4.4 | Mar 12 | Junos OS: An local attacker with shell access can execute arbitrary code Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more |
Showing 5
The 500 most important CVEs for this product (exploited first, then by severity)