JO
Network Security
Junos OS
On CISA KEVExploited in the wild
931
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 392Medium 56Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0030 | 7.5 | Jul 11 | Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2018-0026 | 7.5 | Jul 11 | After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect Affected: 15.1; 15.1; 15.1; 15.1x8 |
| CVE-2018-0022 | 7.5 | Apr 11 | A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +34 more |
| CVE-2018-0020 | 7.5 | Apr 11 | Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon (rpd) crash and restart Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +34 more |
| CVE-2018-0016 | 7.5 | Apr 11 | Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1f; +34 more |
| CVE-2017-10619 | 7.5 | Oct 13 | When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster… Affected: 12.3x48; 15.1x49 |
| CVE-2017-10614 | 7.5 | Oct 13 | A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2017-10608 | 7.5 | Oct 13 | Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +26 more |
| CVE-2017-10607 | 7.5 | Oct 13 | Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit (PDU) sent directly to the router,… Affected: 16.1; 16.1 |
| CVE-2016-4921 | 7.5 | Oct 13 | By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +34 more |
| CVE-2017-2348 | 7.5 | Jul 17 | The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 15.1; 15.1; +31 more |
| CVE-2017-2347 | 7.5 | Jul 17 | A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2017-2314 | 7.5 | Jul 17 | Receipt of a malformed BGP OPEN message may cause the routing protocol daemon (rpd) process to crash and restart Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2017-10605 | 7.5 | Jul 17 | On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the flowd process to crash, halting or interrupting traffic… Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +28 more |
| CVE-2017-2304 | 7.5 | May 30 | Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2,… Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; +13 more |
| CVE-2017-2303 | 7.5 | May 30 | On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51… Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2017-2302 | 7.5 | May 30 | On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3… Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2017-2301 | 7.5 | May 30 | On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +34 more |
| CVE-2017-2300 | 7.5 | May 30 | On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd… Affected: through 12.1x46; through 12.3x48; through 12.3x48 |
| CVE-2017-2315 | 7.5 | Apr 24 | On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2017-2313 | 7.5 | Apr 24 | Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +33 more |
| CVE-2016-1263 | 7.5 | Sep 9 | Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1… Affected: through 12.1x46; 12.1x47; 12.1x47; 12.1x47; 12.1x47; 12.1x47; +34 more |
| CVE-2016-1274 | 7.5 | Apr 15 | Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53 |
| CVE-2016-1270 | 7.5 | Apr 15 | The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7,… Affected: through 12.1x44; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2016-1269 | 7.5 | Apr 15 | Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before… Affected: through 12.1x44; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2026-33797 | 7.4 | Apr 9 | Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset Affected: 25.2 before 25.2R2 |
| CVE-2025-59960 | 7.4 | Jan 15 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30648 | 7.4 | Apr 9 | An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21591 | 7.4 | Apr 9 | A Buffer Access with Incorrect Length Value vulnerability in the jdhcpd daemon of Juniper Networks Junos OS, when DHCP snooping is enabled, allows an unauthenticated, adjacent,… Affected: 23.1; 23.2; 23.2; 23.2; 23.2; 23.2; +13 more |
| CVE-2022-22156 | 7.4 | Jan 19 | An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from… Affected: through 18.3; 18.4; 18.4; 18.4; 18.4; 18.4; +34 more |
| CVE-2021-0259 | 7.4 | Apr 22 | Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-0244 | 7.4 | Apr 22 | A signal handler race condition exists in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS due to the absence of a specific protection mechanism to avoid a… Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; +34 more |
| CVE-2021-0222 | 7.4 | Jan 15 | A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted protocol packets from an adjacent… Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; +34 more |
| CVE-2021-0217 | 7.4 | Jan 15 | A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server… Affected: 17.4; 17.4; 17.4; 18.1; 18.1; 18.1; +34 more |
| CVE-2019-0054 | 7.4 | Oct 9 | An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to… Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +11 more |
| CVE-2017-10620 | 7.4 | Oct 13 | Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2026-21916 | 7.3 | Apr 9 | Junos OS: A low privileged user can escalate their privileges so that they can login as root Affected: before 23.2R2-S7; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; 24.4 before 24.4R2-S2; 25.2 before 25.2R2 |
| CVE-2025-30661 | 7.3 | Jul 11 | An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Networks Junos OS allows a local, low-privileged user to install… Affected: 23.2; 23.2; 23.2; 23.2; 23.2; 23.2; +20 more |
| CVE-2021-0260 | 7.3 | Apr 22 | An improper authorization vulnerability in the Simple Network Management Protocol daemon (snmpd) service of Juniper Networks Junos OS leads an unauthenticated attacker being able… Affected: 17.2; 17.2; 17.2; 17.2; 17.2; 17.2; +34 more |
| CVE-2021-0246 | 7.3 | Apr 22 | On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to… Affected: 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +23 more |
| CVE-2021-0235 | 7.3 | Apr 22 | On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme… Affected: 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2025-52983 | 7.2 | Jul 11 | A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2026-102056 | 7.1 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more |
| CVE-2026-101994 | 7.1 | Oct 14 | Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more |
| CVE-2026-21908 | 7.1 | Jan 15 | A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated,… Affected: 23.2; 23.2; 23.2; 23.2; 23.4; 23.4; +20 more |
| CVE-2021-31360 | 7.1 | Oct 19 | An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows a low-privileged user to overwrite local… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2014-6447 | 7.1 | Feb 11 | Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS) Affected: 12.1x44; 12.1x44; 12.1x44; 12.1x44; 12.1x44; 12.1x44; +34 more |
| CVE-2019-0073 | 7.1 | Oct 9 | The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +34 more |
| CVE-2024-39556 | 7.0 | Jul 10 | A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2026-103993 | 6.8 | Oct 14 | Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more |
The 500 most important CVEs for this product (exploited first, then by severity)