Read the docs

Juniper

Records1285All Threatist records
Exploited (KEV)9In CISA KEV
CVSS critical109CVSS 9.0–10.0
CVSS high693CVSS 7.0–8.9

Exploited now

Juniper records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

250 records in Junos Os Evolved · all components

Priority HIGH 81

An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to exe…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.18476 Published 2026-02-25 Fixed in 25.4R1-S1-EVO, 25.4R2-EVO CWE-732
Priority MEDIUM 63

A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration para…

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00177 Published 2026-07-09 Fixed in 22.3R3-S5, 22.4R3-S10 +4 CWE-476
Priority MEDIUM 57

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18354 Published 2023-08-31 Fixed in 20.4R3-S10, 21.2R3-S5 +16 CWE-20
Priority MEDIUM 49

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-exe…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00568 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-121
Priority MEDIUM 49

An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileg…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00549 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-287
Priority MEDIUM 46

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an u…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01333 Published 2021-01-15 Fixed in 15.1R7-S8, 17.3R3-S10 +25 CWE-754
TI-2025-15559 CVE-2025-21599 · GHSA-p34f-rw7f-c723

Memory leak in Juniper Junos OS Evolved

Priority MEDIUM 45

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00605 Published 2025-01-09 Fixed in 22.4R3-S5-EVO, 23.2R2-S2-EVO +3 CWE-401
Priority MEDIUM 45

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00638 Published 2024-10-11 Fixed in 21.4R3-S9-EVO, 22.2R3-S4-EVO +3 CWE-770
Priority MEDIUM 45

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a De…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00638 Published 2024-10-11 Fixed in 21.2R3-S8, 21.4R3-S8 +14 CWE-754
Priority MEDIUM 45

A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an rpd crash, leading to Denial of Se…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00664 Published 2024-04-12 Fixed in 21.2R3-S7, 21.4R3-S5 +11 CWE-121
Priority MEDIUM 45

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to send a specific rout…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0071 Published 2024-04-12 Fixed in 20.4R3-S10, 21.2R3-S8 +7 CWE-755
Priority MEDIUM 44

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a De…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00422 Published 2025-10-09 Fixed in 23.4R2-S5, 24.2R2-S1 +6 CWE-754
Priority MEDIUM 44

A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00407 Published 2026-01-15 Fixed in 22.4R3-S8, 23.2R2-S5 +8 CWE-126
Priority MEDIUM 44

A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with a specifically malformed AS PATH to caus…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00517 Published 2025-07-11 Fixed in 21.2R3-S9, 22.2R3-S6 +8 CWE-416
Priority MEDIUM 44

A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Serv…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00433 Published 2025-04-09 Fixed in 21.2R3-S9, 21.4R3-S10 +10 CWE-805
Priority MEDIUM 44

A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon (sshd) instances, of Juniper Networks Junos OS Evolved allows an unauthenticated network-based…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00431 Published 2024-07-10 Fixed in 21.4R3-S7-EVO, 22.3R2-S2-EVO +5 CWE-772
Priority MEDIUM 44

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specific malformed BGP update message to ca…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2024-07-10 Fixed in 21.4R3-S8, 22.2R3-S4 +12 CWE-755
Priority MEDIUM 44

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based, unauthenticated attacker to cause the RPD proces…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00593 Published 2024-07-11 Fixed in 20.4R3-S9, 21.2R3-S7 +16 CWE-755
Priority MEDIUM 44

A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update wh…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00466 Published 2024-07-11 Fixed in 21.2R3-S8, 21.4R3-S8 +14 CWE-401
Priority MEDIUM 44

An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600, MX304, and Junos OS Evolved on ACX Series an…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00473 Published 2024-07-11 Fixed in 21.2R3-S4, 21.4R2 +4 CWE-1286
Priority MEDIUM 44

An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (Do…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00437 Published 2024-07-11 Fixed in 21.4R3-S7-EVO, 22.1R3-S6-EVO +6 CWE-229
Priority MEDIUM 44

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specific BGP…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00431 Published 2024-10-09 Fixed in 21.2R3-S8, 21.4R3-S8 +12 CWE-755
TI-2024-26450 CVE-2024-39516 · GHSA-qr97-x53q-9m8f

Out-of-bounds read in Juniper Junos OS

Priority MEDIUM 44

An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifically malformed BGP packet to c…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00431 Published 2024-10-09 Fixed in 21.4R3-S8, 22.2R3-S5 +10 CWE-125
Priority MEDIUM 44

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker sending a specifica…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00457 Published 2024-10-09 Fixed in 21.4R3-S8, 22.2R3-S5 +10 CWE-1288
Load more
Open these records in search →