Vendor
Juniper Networks
1,066 known vulnerabilities in products by Juniper Networks, 7 of them actively exploited (CISA KEV).
Key figures
1,066
Vulnerabilities
7
Actively exploited (KEV)
0
Used by ransomware
87
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-1631 | Juniper Junos OS Path Traversal Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2025-21590 | Junos OS: An local attacker with shell access can execute arbitrary code In CISA KEV | 4.4 | |
| Critical | CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability In CISA KEV | 5.3 | |
| Critical | CVE-2026-101967 | Juniper Networks Junos OS Evolved: OS Command Injection | 8.8 | |
| Critical | CVE-2026-21902 | Juniper Networks Junos OS Evolved: Incorrect Permission Assignment for Critical Resource | 9.8 | |
| High | CVE-2026-101978 | Juniper Networks Junos OS Evolved: OS Command Injection | 8.8 | |
| High | CVE-2026-102059 | Juniper Networks Junos OS: OS Command Injection | 8.8 | |
| Critical | CVE-2026-102031 | Juniper Networks Junos OS Evolved: OS Command Injection | 9.8 | |
| Critical | CVE-2024-21591 | Juniper Networks Junos OS: Out-of-bounds Write | 9.8 | |
| Critical | CVE-2018-0001 | Junos: Unauthenticated Remote Code Execution through J-Web interface | 9.8 | |
| Critical | CVE-2017-10622 | Junos Space: Authentication bypass vulnerability | 9.8 | |
| Critical | CVE-2019-0006 | Juniper Networks Junos OS: Use of Uninitialized Resource | 9.8 | |
| Critical | CVE-2019-0008 | Juniper Networks Junos OS: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2018-0016 | Junos OS: Kernel crash upon receipt of crafted CLNP datagrams | 9.8 | |
| Critical | CVE-2018-0037 | Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages | 9.8 | |
| Critical | CVE-2017-2345 | Junos: snmpd denial of service upon receipt of crafted SNMP packet | 9.8 | |
| High | CVE-2026-21915 | JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root | 6.7 | |
| Critical | CVE-2017-2343 | Juniper Networks Junos OS: Hard-coded Credentials | 10.0 | |
| Critical | CVE-2025-21589 | Juniper Networks Session Smart Router: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2020-1647 | Juniper Networks Junos OS: Double Free | 9.8 | |
| Critical | CVE-2021-0254 | Junos OS: Remote code execution vulnerability in overlayd service | 9.8 |
Products
| Product | CVEs | Actively exploited |
|---|---|---|
| Junos OS | 817 | 7 |
| Junos OS Evolved | 373 | 0 |
| Junos Space | 49 | 0 |
| Northstar Controller Application | 19 | 0 |
| Juniper Atp | 12 | 0 |
| Screenos | 7 | 0 |
| Contrail Service Orchestration | 5 | 0 |
| Paragon Active Assurance | 5 | 0 |
| Junos Space Security Director | 3 | 0 |
| Mist Cloud UI | 3 | 0 |
| Src Series | 3 | 0 |