Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Juniper Networks

Juniper Networks vulnerabilities

Products

Junos Os824
Junos Os Evolved376
Junos Space49
Northstar Controller Application19
Session Smart Router18
Atp12
Session Smart Conductor12
Screenos7
Contrail Service Orchestration5
Paragon Active Assurance5
Junos Space Security Director3
Mist Cloud Ui3
Src Series3
Contrail2
Jsi Lwc2
Sbr Carrier2

Newest

Known exploitedIn KEVPublic exploitFix available

juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.CVE-2019-00557.5 HighOctober 9, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.CVE-2019-00546.8 MediumOctober 9, 2019
juniper junos, juniper networks junos os +1 moreSRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.CVE-2019-00516.5 MediumOctober 9, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.CVE-2019-00507.5 HighOctober 9, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: Persistent XSS vulnerability in J-WebCVE-2019-00478.8 HighOctober 9, 2019
juniper junos, juniper networks junos os, debian linux +2 moreJunos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflowCVE-2019-0053Public exploitFix available7.8 HighJuly 11, 2019
juniper junos, juniper networks junos os +1 moreSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packetsCVE-2019-00527.5 HighJuly 11, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes when BGP peer restartsCVE-2019-00497.5 HighJuly 11, 2019
juniper junos, juniper networks junos os +1 moreEX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may failCVE-2019-00485.8 MediumJuly 11, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.CVE-2019-00466.5 MediumJuly 11, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interfaceCVE-2019-00447.5 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes upon receipt of a specific SNMP packetCVE-2019-00437.5 HighApril 10, 2019
juniper identity management serviceIncorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devicesCVE-2019-00425.7 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.CVE-2019-00416.5 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interfaceCVE-2019-00406.5 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: Login credentials are vulnerable to brute force attacks through the REST APICVE-2019-00395.3 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreSRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoSCVE-2019-00386.5 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit messageCVE-2019-00377.4 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: Firewall filter terms named "internal-1" and "internal-2" being ignoredCVE-2019-00367.2 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: 'set system ports console insecure' allows root password recovery on OAM volumesCVE-2019-00356.8 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreSRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.CVE-2019-00337.5 HighApril 10, 2019
juniper service insight, service now +1 moreJunos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.CVE-2019-00326.5 MediumApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.CVE-2019-00317.4 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: RPD process crashes due to specific BGP peer restarts condition.CVE-2019-00287.5 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreBGP packets can trigger rpd crash when BGP tracing is enabled.CVE-2019-00197.5 HighApril 10, 2019
juniper junos, juniper networks junos os +1 moreQFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) processCVE-2019-00089.8 CriticalApril 10, 2019
juniper networks atp, juniper advanced threat prevention firmware +1 moreJuniper ATP: Password hashing uses DES and a hardcoded saltCVE-2019-00306.7 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Splunk credentials are in logged in clear textCVE-2019-00298.8 HighJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configurationCVE-2019-00275.4 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configurationCVE-2019-00265.4 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menuCVE-2019-00255.4 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menuCVE-2019-00245.4 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menuCVE-2019-00235.4 MediumJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.CVE-2019-002210.0 CriticalJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: secret CLI inputs are logged to /var/log/syslog in clear textCVE-2019-00217.1 HighJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Hard coded credentials used in Web CollectorCVE-2019-002010.0 CriticalJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menuCVE-2019-00185.4 MediumJanuary 15, 2019
juniper junos spaceJunos Space: Unrestricted file upload vulnerabilityCVE-2019-00176.5 MediumJanuary 15, 2019
juniper junos spaceJunos Space: Authenticated user able to delete devices without delete device privilegesCVE-2019-00166.5 MediumJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until rebootCVE-2019-00155.4 MediumJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packetCVE-2019-00147.5 HighJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: RPD crash upon receipt of malformed PIM packetCVE-2019-00136.5 MediumJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: rpd crash on VPLS PE upon receipt of specific BGP messageCVE-2019-00127.5 HighJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)CVE-2019-00116.5 MediumJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of ServiceCVE-2019-00107.5 HighJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFECVE-2019-00095.5 MediumJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: vMX series: Predictable IP ID sequence numbers vulnerabilityCVE-2019-00079.3 CriticalJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configurationCVE-2019-00069.8 CriticalJanuary 15, 2019
juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: API and device keys are logged in a world-readable permissions fileCVE-2019-00047.8 HighJanuary 15, 2019
juniper junos, juniper networks junos os +1 moreJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.CVE-2019-00037.5 HighJanuary 15, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open