Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Priority MEDIUM 42

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with co…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01182 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 39

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00229 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-22
Priority MEDIUM 43

An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root vi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 25

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacke…

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00226 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-74
Priority LOW 30

An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes th…

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00232 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-732
Priority MEDIUM 42

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perf…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01182 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-78
Priority LOW 39

An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute ar…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00196 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-345
Priority MEDIUM 40

An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00344 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-59
Priority LOW 24

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an atta…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00177 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-74
Priority LOW 30

An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00432 Published 2026-10-28 Fixed in 7.0.5, 7.1.7 +1 CWE-125