Skip to contentJuniper vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)CVE-2023-223917.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1CVE-2022-221847.5 High
- juniper junos, juniper networks junos os +1 morecSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesCVE-2022-222517.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remoteCVE-2022-222506.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainCVE-2022-222496.5 Medium
- juniper junos os evolvedJunos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commandsCVE-2022-222487.3 High
- juniper junos os evolvedJunos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)CVE-2022-222477.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PHP file inclusion vulnerability in J-WebCVE-2022-222467.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Path traversal vulnerability in J-WebCVE-2022-222454.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated XPath Injection vulnerability in J-WebCVE-2022-222445.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: XPath Injection vulnerability in J-WebCVE-2022-222434.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-site Scripting (XSS) vulnerability in J-WebCVE-2022-222426.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Vulnerability in J-Web may allow deserialization without authenticationCVE-2022-222418.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenarioCVE-2022-222405.5 Medium
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalationCVE-2022-222398.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processedCVE-2022-222385.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyCVE-2022-222376.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashCVE-2022-222367.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedCVE-2022-222355.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyCVE-2022-222345.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashCVE-2022-222335.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashCVE-2022-222327.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashCVE-2022-222317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAsCVE-2022-222306.5 Medium
- juniper networks paragon active assurance (formerly netrounds), juniper paragon active assurance control center +1 moreParagon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administrationCVE-2022-222298.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetCVE-2022-222287.5 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationCVE-2022-222275.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crashCVE-2022-222266.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashCVE-2022-222255.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVCVE-2022-222246.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.CVE-2022-222236.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeCVE-2022-222205.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentCVE-2022-222195.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentCVE-2022-222187.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDCVE-2022-222117.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsCVE-2022-222085.9 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetCVE-2022-222017.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceCVE-2022-221927.5 High
- apache commons text, juniper security threat response manager, netapp bluexp +2 moreApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaultsCVE-2022-42889Public exploitFix availableEPSS 99.9%9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionalityCVE-2022-222217.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLANCVE-2022-222176.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding dataCVE-2022-222164.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustionCVE-2022-222156.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crashCVE-2022-222146.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateCVE-2022-222135.9 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or dropsCVE-2022-222127.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenarioCVE-2022-222106.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churnCVE-2022-222097.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crashCVE-2022-222077.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-searchCVE-2022-222067.5 High
- Show moreLoading…