Vulnerabilities

Juniper Junos 22.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

196CVEs

CVE-2023-44204

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

Published 2023-10-12 · Analyzed

6.5EPSS 0.003

CVE-2025-30653

Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

Published 2025-04-09 · Analyzed

6.5EPSS 0.002

CVE-2024-39532

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

Published 2024-07-11 · Analyzed

6.3EPSS 0.002

CVE-2024-39528

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash

Published 2024-07-11 · Modified

6.0EPSS 0.003

CVE-2025-21597

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

Published 2025-04-09 · Analyzed

6.0EPSS 0.002

CVE-2024-39536

Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2024-39539

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2025-52958

Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

Published 2025-07-11 · Analyzed

6.0EPSS 0.002

CVE-2025-59962

Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash

Published 2025-10-09 · Analyzed

6.0EPSS 0.002

CVE-2024-21585

Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash

Published 2024-01-12 · Modified

5.9EPSS 0.006

CVE-2022-22219

Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment

Published 2022-10-18 · Modified

5.9EPSS 0.006

CVE-2024-21601

Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash

Published 2024-01-12 · Modified

5.9EPSS 0.005

CVE-2023-36840

Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2023-36838

Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2023-22409

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

Published 2023-01-12 · Modified

5.5EPSS 0.002

CVE-2024-21594

Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

Published 2024-01-12 · Modified

5.5EPSS 0.002

CVE-2023-44193

Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44178

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44177

Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-44176

Junos OS : Stack overflow vulnerability in CLI command processing

Published 2023-10-12 · Modified

5.5EPSS 0.002

CVE-2023-36846

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.935

CVE-2023-36844

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.900

CVE-2023-36847

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Published 2023-08-17 · Analyzed

5.3KEVEPSS 0.835

CVE-2023-36851

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

Published 2023-09-26 · Analyzed

5.3KEVEPSS 0.011

CVE-2023-28968

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

Published 2023-04-17 · Modified

5.3EPSS 0.006

CVE-2024-21596

Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices

Published 2024-01-12 · Modified

5.3EPSS 0.005

CVE-2023-28963

Junos OS: User-controlled input vulnerability in J-Web

Published 2023-04-17 · Modified

5.3EPSS 0.005

CVE-2024-21610

Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck

Published 2024-04-12 · Modified

5.3EPSS 0.005

CVE-2026-33799

Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash

Published 2026-07-09 · Analyzed

5.3EPSS 0.004

CVE-2023-44188

Junos OS: jkdsd crash due to multiple telemetry requests

Published 2023-10-11 · Modified

5.3EPSS 0.003

CVE-2024-21607

Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected

Published 2024-01-12 · Modified

5.3EPSS 0.003

CVE-2023-28984

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

Published 2023-04-17 · Modified

5.3EPSS 0.002

CVE-2024-21615

Junos OS and Junos OS Evolved: A low-privileged user can access confidential information

Published 2024-04-12 · Analyzed

5.1EPSS 0.002

CVE-2023-28979

Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails

Published 2023-04-17 · Modified

4.7EPSS 0.003

CVE-2023-36836

Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed

Published 2023-07-14 · Modified

4.7EPSS 0.002

CVE-2023-28975

Junos OS: The kernel will crash when certain USB devices are inserted

Published 2023-04-17 · Modified

4.6EPSS 0.003

Juniper Junos 22.2

Security check