Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Juniper Networks Junos OS — supportportal.juniper.net/JSA72300 Clear all filters
TI-2023-18639 CVE-2023-36846 · GHSA-rrhw-mwxf-m9mp

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Priority HIGH 83KEV

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.93473 Published 2023-08-17 Fixed in 20.4R3-S8, 21.2R3-S6 +8 CWE-306
TI-2023-18637 CVE-2023-36844 · GHSA-f2v8-3pfh-v3xm

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to…

Priority HIGH 83KEV

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.89958 Published 2023-08-17 Fixed in 20.4R3-S9, 21.2R3-S6 +9 CWE-473
TI-2023-18640 CVE-2023-36847 · GHSA-c38p-r7xc-grgp

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Priority HIGH 83KEV

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.83455 Published 2023-08-17 Fixed in 20.4R3-S8, 21.2R3-S6 +8 CWE-306