Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos spaceJunos Space: Create Quick Template page is vulnerable to reflected cross-site script injectionCVE-2025-600015.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionCVE-2025-600005.1 Medium
- juniper junos spaceJunos Space: API Access Profiles page is vulnerable to reflected cross-site script injectionCVE-2025-599995.1 Medium
- juniper junos spaceJunos Space: Archive Logs screen is vulnerable to reflected cross-site script injectionCVE-2025-599985.1 Medium
- juniper junos spaceJunos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injectionCVE-2025-599975.1 Medium
- juniper junos spaceJunos Space: Configuration View page is vulnerable to reflected cross-site script injectionCVE-2025-599965.1 Medium
- juniper junos spaceJunos Space: Template creation through Definition is vulnerable to reflected cross-site script injectionCVE-2025-599955.1 Medium
- juniper junos spaceJunos Space: Quick Template page is vulnerable to reflected cross-site script injectionCVE-2025-599945.1 Medium
- juniper junos spaceJunos Space: Space Node Setting fields are vulnerable to reflected cross-site script injectionCVE-2025-599935.1 Medium
- juniper junos spaceJunos Space: Secure Console page is vulnerable to reflected cross-site script injectionCVE-2025-599925.1 Medium
- juniper junos spaceJunos Space: Device Management pages are vulnerable to reflected cross-site script injectionCVE-2025-599915.1 Medium
- juniper junos spaceJunos Space: Template creation pages are vulnerable to reflected cross-site script injectionCVE-2025-599905.1 Medium
- juniper junos spaceJunos Space: Device Discovery page is vulnerable to reflected cross-site script injectionCVE-2025-599895.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionCVE-2025-599885.1 Medium
- juniper junos spaceJunos Space: The arbitrary device search field is vulnerable to reflected cross-site script injectionCVE-2025-599875.1 Medium
- juniper junos spaceJunos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injectionCVE-2025-599865.1 Medium
- juniper junos spaceJunos Space: Purging Policy field is vulnerable to reflected cross-site script injectionCVE-2025-599855.1 Medium
- juniper junos spaceJunos Space: Global Search is vulnerable to reflected cross-site script injectionCVE-2025-599845.1 Medium
- juniper junos spaceJunos Space: Template Definition page is vulnerable to reflected cross-site script injectionCVE-2025-599835.1 Medium
- juniper junos spaceJunos Space: Dashboard Search field is vulnerable to reflected cross-site script injectionCVE-2025-599825.1 Medium
- juniper junos spaceJunos Space: Device Template Definition page is vulnerable to reflected cross-site script injectionCVE-2025-599815.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowedCVE-2025-599806.9 Medium
- juniper junos spaceJunos Space: Stored cross-site scripting vulnerability in web applicationCVE-2025-599789.4 Critical
- juniper junos spaceJunos Space: Arbitrary file download vulnerability in web interfaceCVE-2025-599767.1 High
- juniper junos spaceJunos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoSCVE-2025-599758.7 High
- juniper space security director, juniper networks junos space security director +1 moreJunos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerabilityCVE-2025-599749.3 Critical
- juniper space security director, juniper networks junos space security director, junos os +2 moreJunos Space Security Director: Insufficient authorization for sensitive resources in web interfaceCVE-2025-599687.7 High
- juniper junos os evolvedJunos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and r…CVE-2025-599677.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restartCVE-2025-599648.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashCVE-2025-599626.0 Medium
- juniper junos os evolvedJunos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RECVE-2025-599586.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoorCVE-2025-599577.0 High
- juniper junos os evolvedJunos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restartCVE-2025-529617.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crashCVE-2025-529608.2 High
- juniper security director policy enforcerSecurity Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX ServerCVE-2025-111988.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'CVE-2025-529888.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: J-Web can be exposed on additional interfacesCVE-2025-65496.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationCVE-2025-529896.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaksCVE-2025-529866.8 Medium
- juniper junos os evolvedJunos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matchingCVE-2025-529856.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashesCVE-2025-529848.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: After removing ssh public key authentication root can still log inCVE-2025-529838.6 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashCVE-2025-529828.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Sequence of specific PIM packets causes a flowd crashCVE-2025-529818.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE messageCVE-2025-529808.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configuredCVE-2025-529647.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A low-privileged user can disable an interfaceCVE-2025-529636.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session resetCVE-2025-529537.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crashCVE-2025-529527.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crashCVE-2025-529586.0 Medium
- Show moreLoading…