Vendor
Juniper Networks
1,114 known vulnerabilities in products by Juniper Networks, 9 of them actively exploited (CISA KEV).
Key figures
1,114
Vulnerabilities
9
Actively exploited (KEV)
0
Used by ransomware
73
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5477 | ISC BIND Data Processing Errors Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2020-1631 | Juniper Junos OS Path Traversal Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2025-21590 | Junos OS: An local attacker with shell access can execute arbitrary code In CISA KEV | 4.4 | |
| Critical | CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2026-21902 | Juniper Networks Junos OS Evolved: Incorrect Permission Assignment for Critical Resource | 9.8 | |
| Critical | CVE-2022-42889 | Apache Commons Text: Remote Code Execution | 9.8 | |
| Critical | CVE-2024-21591 | Juniper Networks Junos OS: Out-of-bounds Write | 9.8 | |
| Critical | CVE-2020-10188 | Netkit Telnet: Buffer Overflow | 9.8 | |
| High | CVE-2016-1286 | ISC BIND 9: Denial of Service | 8.6 | |
| High | CVE-2025-47273 | Pypa Setuptools: Path Traversal | 8.8 | |
| Critical | CVE-2018-0001 | Junos: Unauthenticated Remote Code Execution through J-Web interface | 9.8 | |
| Critical | CVE-2017-10622 | Junos Space: Authentication bypass vulnerability | 9.8 | |
| Critical | CVE-2019-0006 | Juniper Networks Junos OS: Use of Uninitialized Resource | 9.8 | |
| High | CVE-2023-4481 | Juniper Networks Junos OS: Improper Input Validation | 7.5 | |
| Critical | CVE-2019-0008 | Juniper Networks Junos OS: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-0016 | Junos OS: Kernel crash upon receipt of crafted CLNP datagrams | 9.8 | |
| High | CVE-2017-3145 | Improper fetch cleanup sequencing in the resolver can cause named to crash | 7.5 | |
| Critical | CVE-2018-0037 | Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages | 9.8 | |
| Critical | CVE-2017-2345 | Junos: snmpd denial of service upon receipt of crafted SNMP packet | 9.8 | |
| High | CVE-2026-21915 | JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root | 6.7 |