Juniper

Records1285All Threatist records

Exploited (KEV)9In CISA KEV

CVSS critical109CVSS 9.0–10.0

CVSS high693CVSS 7.0–8.9

Exploited now

Juniper records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2015-06436 Juniper ScreenOS Improper Authentication Vulnerability CRITICAL 100KEV 2025-10-02 TI-2025-15550 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability CRITICAL 89KEV 2025-03-13 TI-2023-18637 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability HIGH 83KEV 2023-11-13 TI-2023-18638 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability CRITICAL 100KEV 2023-11-13 TI-2023-18639 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability HIGH 83KEV 2023-11-13

Components

Products in the NVD configurations · select one to filter the records

Junos 793 records CRITICAL Junos Os Evolved 250 records HIGH Junos Space 79 records MEDIUM Northstar Controller 19 records MEDIUM Screenos 16 records CRITICAL Advanced Threat Prevention 11 records MEDIUM Srx100 11 records MEDIUM Srx110 11 records MEDIUM

Records

16 records in Screenos · all components

TI-2015-06436 CVE-2015-7755 · GHSA-43vr-5w6h-pr3g

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before…

CRITICAL 100KEV

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.0r17b, 6.3.0r18 befor…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.61139 Published 2015-12-19 No fix listed CWE-287

TI-2017-01617 CVE-2017-2336 · GHSA-qgvx-4g6f-j5mh

ScreenOS: XSS vulnerability in ScreenOS Firewall

MEDIUM 44

A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based attacker to inject HTML/JavaScript content into the management…

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.01194 Published 2017-07-14 Fixed in 6.3.0r24 CWE-79

TI-2015-06435 CVE-2015-7754 · GHSA-r85q-gj7v-7cm7

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote…

MEDIUM 42

Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03855 Published 2016-01-08 No fix listed CWE-20

TI-2014-02278 CVE-2014-2842 · GHSA-gm87-4493-w2gq

Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service…

MEDIUM 40

Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03564 Published 2014-04-15 No fix listed CWE-399

TI-2017-01620 CVE-2017-2339 · GHSA-6x93-83wf-v8cw

ScreenOS: XSS vulnerability in ScreenOS Firewall

LOW 39

A persistent cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a user with the 'security' role to inject HTML/JavaScript content into the man…

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.01078 Published 2017-07-14 Fixed in 6.3.0r24 CWE-79

TI-2017-01619 CVE-2017-2338 · GHSA-pw6c-8vcv-7fmm

ScreenOS: XSS vulnerability in ScreenOS Firewall

LOW 39

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.01078 Published 2017-07-14 Fixed in 6.3.0r24 CWE-79

TI-2017-01618 CVE-2017-2337 · GHSA-wccx-jhf8-9569

ScreenOS: XSS vulnerability in ScreenOS Firewall

LOW 39

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.01078 Published 2017-07-14 Fixed in 6.3.0r24 CWE-79

TI-2017-01616 CVE-2017-2335 · GHSA-fpq7-hw49-8x64

ScreenOS: XSS vulnerability in ScreenOS Firewall

LOW 39

CVSS 3.0HIGH 8.4 Network High privileges User interaction EPSS 0.01078 Published 2017-07-14 Fixed in 6.3.0r24 CWE-79

TI-2016-01163 CVE-2016-1268 · GHSA-h725-jppv-w85f

The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows…

LOW 37

The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01948 Published 2016-04-15 No fix listed CWE-20

TI-2014-03094 CVE-2014-3814 · GHSA-xm38-rqgf-xhmp

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when…

LOW 37

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (crash and reboot) via a sequence o…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01333 Published 2014-06-13 No fix listed CWE-20

TI-2014-03093 CVE-2014-3813 · GHSA-pg8q-45w2-grrw

Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with…

LOW 37

Unspecified vulnerability in the Juniper Networks NetScreen Firewall products with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (cras…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01333 Published 2014-06-13 No fix listed

TI-2013-05719 CVE-2013-6958 · GHSA-9vr7-72gc-v2wj

Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death…

LOW 35

Juniper NetScreen Firewall running ScreenOS 5.4, 6.2, or 6.3, when the Ping of Death screen is disabled, allows remote attackers to cause a denial of service via a crafted packet.

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01881 Published 2013-12-13 No fix listed

TI-2018-00014 CVE-2018-0014 · GHSA-xgmx-gwqj-mmc5

ScreenOS: Etherleak vulnerability found on ScreenOS device

LOW 30

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00603 Published 2018-01-10 Fixed in 6.3.0r25 CWE-200

TI-2015-06437 CVE-2015-7756 · GHSA-fq6r-qhq8-2958

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12…

LOW 28

The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02548 Published 2015-12-19 No fix listed CWE-310

TI-2015-06432 CVE-2015-7750 · GHSA-xmw2-9pgq-w58j

The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall…

LOW 27

The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS before 6.3.0r13-dnd1, 6.3.0r14 through 6.3.0r18 before 6.3.0r18-dnc1, and 6.3.0r19 allows remote attackers to cau…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01988 Published 2015-10-19 No fix listed CWE-20

TI-2013-05978 CVE-2013-7313 · GHSA-6p9f-747c-m7w6

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x…

LOW 27

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing op…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.01076 Published 2014-01-23 No fix listed

Open these records in search →