VendorsJuniperex4650all versions

Vulnerabilities

Juniper EX4650

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

48CVEs

CVE-2021-0211

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

Published 2021-01-15 · Modified

10.0EPSS 0.013

CVE-2019-0006

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

Published 2019-01-15 · Modified

9.8EPSS 0.053

CVE-2019-0008

QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process

Published 2019-04-10 · Modified

9.8EPSS 0.045

CVE-2021-0275

Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

Published 2021-04-22 · Modified

9.3EPSS 0.012

CVE-2018-0043

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

Published 2018-10-10 · Modified

8.8EPSS 0.012

CVE-2019-0062

Junos OS: Session fixation vulnerability in J-Web

Published 2019-10-09 · Modified

8.8EPSS 0.011

CVE-2024-21620

Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS

Published 2024-01-25 · Modified

8.8EPSS 0.009

CVE-2024-39565

Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.

Published 2024-07-10 · Analyzed

8.8EPSS 0.005

CVE-2024-47497

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Published 2024-10-11 · Analyzed

8.7EPSS 0.006

CVE-2020-1613

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Published 2020-04-08 · Modified

8.6EPSS 0.013

CVE-2021-0203

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Published 2021-01-15 · Modified

8.6EPSS 0.010

CVE-2022-22221

Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality

Published 2022-07-20 · Modified

7.8EPSS 0.002

CVE-2018-15504

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.

Published 2018-08-18 · Modified

7.5EPSS 0.028

CVE-2022-22188

Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang.

Published 2022-04-14 · Modified

7.5EPSS 0.015

CVE-2019-0043

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2021-0261

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Published 2021-04-22 · Modified

7.5EPSS 0.011

CVE-2021-0285

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2022-22174

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2024-21619

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Published 2024-01-25 · Modified

7.5EPSS 0.009

CVE-2020-1607

Junos OS: Cross-Site Scripting (XSS) in J-Web

Published 2020-01-15 · Modified

7.5EPSS 0.009

CVE-2023-44191

Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2021-0217

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Published 2021-01-15 · Modified

7.4EPSS 0.007

CVE-2021-0222

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Published 2021-01-15 · Modified

7.4EPSS 0.006

CVE-2021-0244

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Published 2021-04-22 · Modified

7.4EPSS 0.006

CVE-2022-22186

Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded

Published 2022-04-14 · Modified

7.2EPSS 0.006

CVE-2024-30388

Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2026-33781

Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-59957

Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor

Published 2025-10-09 · Analyzed

7.0EPSS 0.002

CVE-2020-1618

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

Published 2020-04-08 · Modified

6.9EPSS 0.004

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2024-39533

Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used

Published 2024-07-11 · Analyzed

6.9EPSS 0.003

CVE-2025-60007

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Published 2026-01-15 · Modified

6.8EPSS 0.001

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

CVE-2022-22203

Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot

Published 2022-07-20 · Modified

6.5EPSS 0.011

CVE-2021-31370

Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-0237

Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2022-22226

Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22405

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Published 2023-01-12 · Modified

6.5EPSS 0.003

Juniper EX4650

Security check