Juniper Networks
Number 25 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Juniper, Juniper Networks
Total vulnerabilities
1,091
Critical
55
High
466
Known Exploited
8
Exploit available
1
Visible in Bangladesh
572
Services seen by internet scanning
Network, no login needed
51.8%
Of 1,055 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 245 | 20 | 105 | 117 | 3 | 0 |
| 2025 | 94 | 2 | 27 | 65 | 0 | 0 |
| 2024 | 132 | 2 | 51 | 79 | 0 | 0 |
| 2023 | 100 | 1 | 43 | 56 | 0 | 0 |
| 2022 | 95 | 0 | 51 | 44 | 0 | 0 |
| 2021 | 134 | 5 | 67 | 62 | 0 | 0 |
| 2020 | 81 | 4 | 41 | 36 | 0 | 0 |
| 2019 | 73 | 5 | 34 | 33 | 0 | 1 |
| 2018 | 56 | 7 | 21 | 28 | 0 | 0 |
| 2017 | 80 | 8 | 26 | 11 | 0 | 35 |
| 2016 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2015 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Junos OS | 820 | 411 |
| Junos OS Evolved | 107 | 47 |
| Junos Space | 49 | 9 |
| NorthStar Controller Application | 19 | 0 |
| Session Smart Router | 18 | 11 |
| Juniper ATP | 12 | 5 |
| ScreenOS | 8 | 6 |
| Contrail Service Orchestration | 5 | 4 |
| Paragon Active Assurance | 5 | 5 |
| Junos Space Security Director | 3 | 3 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 123 | 66 |
| Improper Check for Unusual or Exceptional Conditions | 66 | 25 |
| Improper Error Handling | 38 | 15 |
| Cross-Site Scripting | 37 | 12 |
| Improper Input Validation | 37 | 24 |
| Denial of Service | 35 | 17 |
| Stack-based Buffer Overflow | 33 | 31 |
| Missing Release of Memory after Effective Lifetime | 30 | 9 |
| Reachable Assertion | 28 | 7 |
| Command Injection | 27 | 23 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-21590 | Junos OS: An local attacker with shell access can execute arbitrary code | Medium | 1.7% | |
| CVE-2023-36851 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files | Medium | 1.1% | |
| CVE-2023-36847 | Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | Medium | 83.5% | |
| CVE-2023-36846 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | Medium | 93.5% | |
| CVE-2023-36845 | Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable | Critical | 95.1% | |
| CVE-2023-36844 | Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables | Medium | 90.0% | |
| CVE-2020-1631 | Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services | High | 4.9% | |
| CVE-2015-7755 | Juniper ScreenOS Improper Authentication Vulnerability | Critical | 61.4% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-106079 | Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration | High | 1.2% | |
| CVE-2026-103411 | Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing | High | 0.2% | |
| CVE-2026-103410 | Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection | High | 0.3% | |
| CVE-2026-103409 | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed | Critical | 0.3% | |
| CVE-2026-103408 | Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options | High | 0.3% | |
| CVE-2026-103407 | Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management | High | 0.2% | |
| CVE-2026-103406 | Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. | Critical | 0.5% | |
| CVE-2026-103405 | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting | Medium | 0.2% | |
| CVE-2026-103404 | Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials | Medium | 0.2% | |
| CVE-2026-103403 | Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules | High | 1.2% |