Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.
Priority LOW 36CWE-643Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
An Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in J-Web shipped with Juniper Networks Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device. While an administrator is logged into a J-Web session or has previously logged in and subsequently logged out of their J-Web session, the attacker can arbitrarily execute commands on the target device with the other user's credentials. In the worst case, the attacker will have full control over the device. This issue affects Junos OS: * All versions before 21.2R3-S8, * from 21.4 before 21.4R3-S7, * from 22.2 before 22.2R3-S4, * from 22.3 before 22.3R3-S3, * from 22.4 before 22.4R3-S2, * from 23.2 before 23.2R2, * from 23.4 before 23.4R1-S1, 23.4R2.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00517 44th percentileScored 2026-11-07
Fix Fixed Junos OS (Juniper Networks, Inc.): 21.2R3-S8, 21.4R3-S7, 22.2R3-S4 +5
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Juniper | Junos OS | before 21.2R3-S8; 21.4 to before 21.4R3-S7; 22.2 to before 22.2R3-S4; 22.3 to before 22.3R3-S3; 22.4 to before 22.4R3-S2; 23.2 to before 23.2R2; 23.4 to before 23.4R1-S1, 23.4R2 | 21.2R3-S8, 21.4R3-S7, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2, 23.4R1-S1, 23.4R2 | Patch available | CNA |
- Junos OS VendorJuniper Affected before 21.2R3-S8; 21.4 to before 21.4R3-S7; 22.2 to before 22.2R3-S4; 22.3 to before 22.3R3-S3; 22.4 to before 22.4R3-S2; 23.2 to before 23.2R2; 23.4 to before 23.4R1-S1, 23.4R2 Fixed in 21.2R3-S8, 21.4R3-S7, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2, 23.4R1-S1, 23.4R2 Patch available CNA
CPE configurations NVD · 99
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:juniper:j-web:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | before 21.2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:* | 21.2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:* | 21.2 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:* | 21.2 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:* | 21.2 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:* | 21.2 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:* | 21.2 r2-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:* | 21.2 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:* | 21.2 r3 | Vulnerable | Juniper |
- cpe:2.3:a:juniper:j-web:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* Versions before 21.2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:* Versions 21.2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:* Versions 21.2 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:* Versions 21.2 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:* Versions 21.2 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:* Versions 21.2 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:* Versions 21.2 r2-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:* Versions 21.2 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:* Versions 21.2 r3 Vulnerable ·Juniper
Show 89 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:* | 21.2 r3-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:* | 21.2 r3-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:* | 21.2 r3-s3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:* | 21.2 r3-s4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:* | 21.2 r3-s5 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:* | 21.2 r3-s6 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:* | 21.2 r3-s7 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:* | 21.4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:* | 21.4 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:* | 21.4 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:* | 21.4 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:* | 21.4 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:* | 21.4 r2-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:* | 21.4 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:* | 21.4 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:* | 21.4 r3-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:* | 21.4 r3-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:* | 21.4 r3-s3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:* | 21.4 r3-s4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:* | 21.4 r3-s5 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:* | 21.4 r3-s6 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:* | 22.2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:* | 22.2 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:* | 22.2 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:* | 22.2 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:* | 22.2 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:* | 22.2 r2-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:* | 22.2 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:* | 22.2 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:* | 22.2 r3-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:* | 22.2 r3-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:* | 22.2 r3-s3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:* | 22.3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:* | 22.3 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:* | 22.3 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:* | 22.3 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:* | 22.3 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:* | 22.3 r2-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r2-s2:*:*:*:*:*:* | 22.3 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:* | 22.3 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r3-s1:*:*:*:*:*:* | 22.3 r3-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.3:r3-s2:*:*:*:*:*:* | 22.3 r3-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:* | 22.4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:* | 22.4 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:* | 22.4 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:* | 22.4 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:* | 22.4 r2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:* | 22.4 r2-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:* | 22.4 r2-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:* | 22.4 r3 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:* | 22.4 r3-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:* | 23.2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:* | 23.2 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:* | 23.2 r1-s1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:* | 23.2 r1-s2 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:* | 23.4 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:* | 23.4 r1 | Vulnerable | Juniper |
| cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:* | 23.4 r2 | Vulnerable | Juniper |
| cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4100-f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4100-h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex9204:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex9208:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:ex9214:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
| cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Juniper |
- cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:* Versions 21.2 r3-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:* Versions 21.2 r3-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:* Versions 21.2 r3-s3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:* Versions 21.2 r3-s4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:* Versions 21.2 r3-s5 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:* Versions 21.2 r3-s6 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.2:r3-s7:*:*:*:*:*:* Versions 21.2 r3-s7 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:* Versions 21.4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:* Versions 21.4 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:* Versions 21.4 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:* Versions 21.4 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:* Versions 21.4 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:* Versions 21.4 r2-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:* Versions 21.4 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:* Versions 21.4 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:* Versions 21.4 r3-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:* Versions 21.4 r3-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:* Versions 21.4 r3-s3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:* Versions 21.4 r3-s4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s5:*:*:*:*:*:* Versions 21.4 r3-s5 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:21.4:r3-s6:*:*:*:*:*:* Versions 21.4 r3-s6 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:-:*:*:*:*:*:* Versions 22.2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:* Versions 22.2 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:* Versions 22.2 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:* Versions 22.2 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:* Versions 22.2 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:* Versions 22.2 r2-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:* Versions 22.2 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:* Versions 22.2 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:* Versions 22.2 r3-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r3-s2:*:*:*:*:*:* Versions 22.2 r3-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.2:r3-s3:*:*:*:*:*:* Versions 22.2 r3-s3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:-:*:*:*:*:*:* Versions 22.3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:* Versions 22.3 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:* Versions 22.3 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:* Versions 22.3 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:* Versions 22.3 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:* Versions 22.3 r2-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r2-s2:*:*:*:*:*:* Versions 22.3 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r3:*:*:*:*:*:* Versions 22.3 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r3-s1:*:*:*:*:*:* Versions 22.3 r3-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.3:r3-s2:*:*:*:*:*:* Versions 22.3 r3-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:-:*:*:*:*:*:* Versions 22.4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:* Versions 22.4 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:* Versions 22.4 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:* Versions 22.4 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:* Versions 22.4 r2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r2-s1:*:*:*:*:*:* Versions 22.4 r2-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r2-s2:*:*:*:*:*:* Versions 22.4 r2-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r3:*:*:*:*:*:* Versions 22.4 r3 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:22.4:r3-s1:*:*:*:*:*:* Versions 22.4 r3-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.2:-:*:*:*:*:*:* Versions 23.2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:* Versions 23.2 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.2:r1-s1:*:*:*:*:*:* Versions 23.2 r1-s1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.2:r1-s2:*:*:*:*:*:* Versions 23.2 r1-s2 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.4:-:*:*:*:*:*:* Versions 23.4 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.4:r1:*:*:*:*:*:* Versions 23.4 r1 Vulnerable ·Juniper
- cpe:2.3:o:juniper:junos:23.4:r2:*:*:*:*:*:* Versions 23.4 r2 Vulnerable ·Juniper
- cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4100-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4100-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex9204:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex9208:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:ex9214:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
- cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Juniper
Remediation
- Fix · CNA Junos OS (Juniper Networks, Inc.) Fixed in 21.2R3-S8, 21.4R3-S7, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2, 23.4R1-S1, 23.4R2
Timeline
- 2026-10-02 Threatist record created from CVE-2024-39565
- 2026-10-03 Alias added: GHSA-9xg8-vx2w-7c89
References
Sources
- CVE-2024-39565 · CVE Program
- CVE-2024-39565 · NVD
- FIRST EPSS
- GHSA-9xg8-vx2w-7c89 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences