This site currently shows sample data for demonstration.

Vendor Profiles

Juniper Networks

Number 25 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Combines these spellings from source records: Juniper, Juniper Networks

Compare with another vendor

Total vulnerabilities

1,091

Critical

55

High

466

Known Exploited

8

Exploit available

1

Visible in Bangladesh

572

Services seen by internet scanning

Network, no login needed

51.8%

Of 1,055 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)2452010511730
2025942276500
20241322517900
20231001435600
2022950514400
20211345676200
2020814413600
2019735343301
2018567212800
20178082611035
2016000000
2015110000

Top products

ProductTotalCritical/High
Junos OS820411
Junos OS Evolved10747
Junos Space499
NorthStar Controller Application190
Session Smart Router1811
Juniper ATP125
ScreenOS86
Contrail Service Orchestration54
Paragon Active Assurance55
Junos Space Security Director33

Top bug types

Bug typeTotalCritical/High
Memory Corruption12366
Improper Check for Unusual or Exceptional Conditions6625
Improper Error Handling3815
Cross-Site Scripting3712
Improper Input Validation3724
Denial of Service3517
Stack-based Buffer Overflow3331
Missing Release of Memory after Effective Lifetime309
Reachable Assertion287
Command Injection2723

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2025-21590Junos OS: An local attacker with shell access can execute arbitrary codeMedium1.7%
CVE-2023-36851Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesMedium1.1%
CVE-2023-36847Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesMedium83.5%
CVE-2023-36846Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesMedium93.5%
CVE-2023-36845Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variableCritical95.1%
CVE-2023-36844Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesMedium90.0%
CVE-2020-1631Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) servicesHigh4.9%
CVE-2015-7755Juniper ScreenOS Improper Authentication VulnerabilityCritical61.4%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configurationHigh1.2%
CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsingHigh0.2%
CVE-2026-103410Session Smart Router: Integer overflow causes denial of service during TLS certificate inspectionHigh0.3%
CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessedCritical0.3%
CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP optionsHigh0.3%
CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementHigh0.2%
CVE-2026-103406Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.Critical0.5%
CVE-2026-103405Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splittingMedium0.2%
CVE-2026-103404Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentialsMedium0.2%
CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rulesHigh1.2%