Read the docs

Juniper

Records1285All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical109CVSS 9.0–10.0
CVSS high693CVSS 7.0–8.9

Exploited now

Juniper records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2015-06436 Juniper ScreenOS Improper Authentication Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-15550 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability Priority CRITICAL 89KEV 2025-03-13TI-2023-18637 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Priority HIGH 83KEV 2023-11-13TI-2023-18638 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Priority CRITICAL 100KEV 2023-11-13TI-2023-18639 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Priority HIGH 83KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records
Junos 793 records CRITICAL Junos Os Evolved 250 records HIGH Junos Space 79 records MEDIUM Northstar Controller 19 records MEDIUM Screenos 16 records CRITICAL Advanced Threat Prevention 11 records MEDIUM Srx100 11 records MEDIUM Srx110 11 records MEDIUM

Records

11 records in Advanced Threat Prevention · all components

TI-2019-00020 CVE-2019-0020 · GHSA-426w-g76x-326w

Juniper ATP: Hard coded credentials used in Web Collector

Priority MEDIUM 46

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01569 Published 2019-01-15 Fixed in 5.0.3 CWE-798
TI-2019-00022 CVE-2019-0022 · GHSA-4c33-jjxv-7pfw

Hard-coded credentials in Juniper ATP

Priority MEDIUM 45

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01129 Published 2019-01-15 Fixed in 5.0.3 CWE-798
TI-2019-00021 CVE-2019-0021 · GHSA-6cqx-g9mw-4p5m

Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text

Priority LOW 31

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00336 Published 2019-01-15 Fixed in 5.0.4 CWE-532
TI-2019-00027 CVE-2019-0027 · GHSA-682v-4g9w-9pvp

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administra…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00026 CVE-2019-0026 · GHSA-r9jm-59xm-qf6g

Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration se…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0063 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00025 CVE-2019-0025 · GHSA-xf39-pfrw-q9g7

Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00024 CVE-2019-0024 · GHSA-h3qq-r4hm-3rxm

Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00023 CVE-2019-0023 · GHSA-5gxc-qhvh-x4f3

Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration sessio…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-01-15 Fixed in 5.0.3 CWE-79
TI-2019-00018 CVE-2019-0018 · GHSA-64q2-7r9m-7p7x

Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu

Priority LOW 25

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2019-01-15 Fixed in 5.0.3 CWE-79
Open these records in search →