Vulnerabilities

Juniper Junos 22.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

152CVEs

CVE-2022-22219

Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment

Published 2022-10-18 · Modified

5.9EPSS 0.006

CVE-2024-21601

Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash

Published 2024-01-12 · Modified

5.9EPSS 0.005

CVE-2023-28961

Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used

Published 2023-04-17 · Modified

5.8EPSS 0.004

CVE-2023-36840

Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2023-36838

Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2022-22233

Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

Published 2022-10-18 · Modified

5.5EPSS 0.002

CVE-2023-22409

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

Published 2023-01-12 · Modified

5.5EPSS 0.002

CVE-2024-21594

Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

Published 2024-01-12 · Modified

5.5EPSS 0.002

CVE-2023-28980

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

Published 2023-04-17 · Modified

5.5EPSS 0.002

CVE-2023-44193

Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44178

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44177

Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44176

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-36846

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.935

CVE-2023-36844

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.900

CVE-2023-36847

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.835

CVE-2023-36851

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

Published 2023-09-26 · Analyzed

5.3KEVEPSS 0.011

CVE-2023-28968

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

Published 2023-04-17 · Modified

5.3EPSS 0.006

CVE-2024-21596

Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices

Published 2024-01-12 · Modified

5.3EPSS 0.005

CVE-2022-22244

Junos OS: Unauthenticated XPath Injection vulnerability in J-Web

Published 2022-10-18 · Modified

5.3EPSS 0.005

CVE-2023-28963

Junos OS: User-controlled input vulnerability in J-Web

Published 2023-04-17 · Modified

5.3EPSS 0.005

CVE-2024-21610

Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck

Published 2024-04-12 · Modified

5.3EPSS 0.005

CVE-2026-33799

Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash

Published 2026-07-09 · Analyzed

5.3EPSS 0.004

CVE-2023-44188

Junos OS: jkdsd crash due to multiple telemetry requests

Published 2023-10-11 · Modified

5.3EPSS 0.003

CVE-2024-21607

Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected

Published 2024-01-12 · Modified

5.3EPSS 0.003

CVE-2023-28984

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

Published 2023-04-17 · Modified

5.3EPSS 0.002

CVE-2024-21615

Junos OS and Junos OS Evolved: A low-privileged user can access confidential information

Published 2024-04-12 · Analyzed

5.1EPSS 0.002

CVE-2023-28979

Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails

Published 2023-04-17 · Modified

4.7EPSS 0.003

CVE-2023-36836

Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed

Published 2023-07-14 · Modified

4.7EPSS 0.002

CVE-2023-28975

Junos OS: The kernel will crash when certain USB devices are inserted

Published 2023-04-17 · Modified

4.6EPSS 0.003

CVE-2022-22245

Junos OS: Path traversal vulnerability in J-Web

Published 2022-10-18 · Modified

4.3EPSS 0.007

CVE-2022-22243

Junos OS: XPath Injection vulnerability in J-Web

Published 2022-10-18 · Modified

4.3EPSS 0.005

Juniper Junos 22.1

Security check