Juniper Junos Os Evolved — known CVE vulnerabilities

Every CVE whose affected-product data names Juniper Junos Os Evolved, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

• CVE-2021-0211 — CVSS 10.0 (critical): An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD)…
• CVE-2026-21902 — CVSS 9.8 (critical): An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos…
• CVE-2023-28983 — CVSS 8.8 (high): An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows…
• CVE-2021-0208 — CVSS 8.8 (high): An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to…
• CVE-2020-1632 — CVSS 8.6 (high): In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to…
• CVE-2022-22239 — CVSS 8.2 (high): An Execution with Unnecessary Privileges vulnerability in Management Daemon (mgd) of Juniper Networks Junos OS Evolved allows a locally…
• CVE-2024-47490 — CVSS 8.2 (high): An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine (PFE) of Juniper…
• CVE-2023-28960 — CVSS 8.2 (high): An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated…
• CVE-2025-52954 — CVSS 7.8 (high): A Missing Authorization vulnerability in the internal virtual routing and forwarding (VRF) of Juniper Networks Junos OS Evolved allows a…
• CVE-2023-28966 — CVSS 7.8 (high): An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell…
• CVE-2024-39522 — CVSS 7.8 (high): An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated…
• CVE-2021-31357 — CVSS 7.8 (high): A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated…
• CVE-2021-31356 — CVSS 7.8 (high): A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI…
• CVE-2021-31358 — CVSS 7.8 (high): A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI…
• CVE-2021-31359 — CVSS 7.8 (high): A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause…
• CVE-2024-39523 — CVSS 7.8 (high): An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated…
• CVE-2024-39520 — CVSS 7.8 (high): An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated…
• CVE-2024-39521 — CVSS 7.8 (high): An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated…
• CVE-2026-33793 — CVSS 7.8 (high): An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows…
• CVE-2024-39524 — CVSS 7.8 (high): An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated…
• CVE-2024-39555 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS…
• CVE-2024-39552 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS…
• CVE-2021-31374 — CVSS 7.5 (high): On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a…
• CVE-2021-31383 — CVSS 7.5 (high): In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to…
• CVE-2024-39549 — CVSS 7.5 (high): A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2024-39548 — CVSS 7.5 (high): An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated…
• CVE-2024-39542 — CVSS 7.5 (high): An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
• CVE-2022-22183 — CVSS 7.5 (high): An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able…
• CVE-2022-22184 — CVSS 7.5 (high): An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2022-22192 — CVSS 7.5 (high): An Improper Validation of Syntactic Correctness of Input vulnerability in the kernel of Juniper Networks Junos OS Evolved on PTX series…
• CVE-2024-39531 — CVSS 7.5 (high): An Improper Handling of Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series…
• CVE-2022-22194 — CVSS 7.5 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on…
• CVE-2022-22195 — CVSS 7.5 (high): An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated…
• CVE-2024-39525 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2022-22197 — CVSS 7.5 (high): An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and…
• CVE-2023-22401 — CVSS 7.5 (high): An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos…
• CVE-2020-1626 — CVSS 7.5 (high): A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of…
• CVE-2020-1638 — CVSS 7.5 (high): The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet…
• CVE-2020-1644 — CVSS 7.5 (high): On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be…
• CVE-2020-1646 — CVSS 7.5 (high): On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process…
• CVE-2020-1648 — CVSS 7.5 (high): On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD)…
• CVE-2025-60004 — CVSS 7.5 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2025-60003 — CVSS 7.5 (high): A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2025-52946 — CVSS 7.5 (high): A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved…
• CVE-2025-30651 — CVSS 7.5 (high): A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2021-0250 — CVSS 7.5 (high): In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in…
• CVE-2025-21599 — CVSS 7.5 (high): A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved…
• CVE-2025-21598 — CVSS 7.5 (high): An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an…
• CVE-2021-0286 — CVSS 7.5 (high): A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially…
• CVE-2024-47502 — CVSS 7.5 (high): An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an…
• CVE-2024-47499 — CVSS 7.5 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and…
• CVE-2024-39564 — CVSS 7.5 (high): This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing…
• CVE-2024-39562 — CVSS 7.5 (high): A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon (sshd)…
• CVE-2021-31350 — CVSS 7.5 (high): An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks…
• CVE-2021-31353 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject…
• CVE-2023-0026 — CVSS 7.5 (high): An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-22393 — CVSS 7.5 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS…
• CVE-2024-21602 — CVSS 7.5 (high): A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an…
• CVE-2024-21598 — CVSS 7.5 (high): An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS…
• CVE-2023-22400 — CVSS 7.5 (high): An Uncontrolled Resource Consumption vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows…
• CVE-2023-28982 — CVSS 7.5 (high): A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS…
• CVE-2023-4481 — CVSS 7.5 (high): An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-44197 — CVSS 7.5 (high): An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-44186 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows…
• CVE-2023-28964 — CVSS 7.5 (high): An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2023-28967 — CVSS 7.5 (high): A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS…
• CVE-2023-44185 — CVSS 7.5 (high): An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of…
• CVE-2022-22211 — CVSS 7.5 (high): A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged…
• CVE-2022-22212 — CVSS 7.5 (high): An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
• CVE-2024-39516 — CVSS 7.5 (high): An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2024-39515 — CVSS 7.5 (high): An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2024-30395 — CVSS 7.5 (high): An Improper Validation of Specified Type of Input vulnerability in Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved allows an…
• CVE-2024-30394 — CVSS 7.5 (high): A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an…
• CVE-2024-30382 — CVSS 7.5 (high): An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2024-21614 — CVSS 7.5 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and…
• CVE-2024-21612 — CVSS 7.5 (high): An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos…
• CVE-2024-21611 — CVSS 7.5 (high): A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2022-22247 — CVSS 7.5 (high): An Improper Input Validation vulnerability in ingress TCP segment processing of Juniper Networks Junos OS Evolved allows a network-based…
• CVE-2024-21604 — CVSS 7.5 (high): An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an…
• CVE-2025-59960 — CVSS 7.4 (high): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and…
• CVE-2026-33797 — CVSS 7.4 (high): An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker…
• CVE-2021-0259 — CVSS 7.4 (high): Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN…
• CVE-2025-30648 — CVSS 7.4 (high): An Improper Input Validation vulnerability in the Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2024-39546 — CVSS 7.3 (high): A Missing Authorization vulnerability in the Socket Intercept (SI) command file interface of Juniper Networks Junos OS Evolved allows an…
• CVE-2022-22248 — CVSS 7.3 (high): An Incorrect Permission Assignment vulnerability in shell processing of Juniper Networks Junos OS Evolved allows a low-privileged local…
• CVE-2023-44182 — CVSS 7.3 (high): An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API…
• CVE-2026-21908 — CVSS 7.1 (high): A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS…
• CVE-2021-31354 — CVSS 7.1 (high): An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos…
• CVE-2021-31360 — CVSS 7.1 (high): An improper privilege management vulnerability in the Juniper Networks Junos OS and Junos OS Evolved command-line interpreter (CLI) allows…
• CVE-2021-0226 — CVSS 7.1 (high): On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate…
• CVE-2023-28973 — CVSS 7.1 (high): An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated…
• CVE-2024-47495 — CVSS 6.7 (medium): An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full…
• CVE-2025-52988 — CVSS 6.7 (medium): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks…
• CVE-2026-33791 — CVSS 6.7 (medium): An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local…
• CVE-2020-1666 — CVSS 6.6 (medium): The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session…
• CVE-2024-39512 — CVSS 6.6 (medium): An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with…
• CVE-2023-36849 — CVSS 6.5 (medium): An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks…
• CVE-2023-44175 — CVSS 6.5 (medium): A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send…
• CVE-2023-36833 — CVSS 6.5 (medium): A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004…
• CVE-2023-36839 — CVSS 6.5 (medium): An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks…
• CVE-2023-44184 — CVSS 6.5 (medium): An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the management daemon (mgd) process of Juniper…
• CVE-2023-22407 — CVSS 6.5 (medium): An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-44196 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS Evolved on…
• CVE-2023-22406 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows…
• CVE-2023-44204 — CVSS 6.5 (medium): An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos…
• CVE-2022-22250 — CVSS 6.5 (medium): An Improper Control of a Resource Through its Lifetime vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and…
• CVE-2024-21613 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos…
• CVE-2024-21618 — CVSS 6.5 (medium): An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS…
• CVE-2024-30380 — CVSS 6.5 (medium): An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an adjacent…
• CVE-2022-22230 — CVSS 6.5 (medium): An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2024-30403 — CVSS 6.5 (medium): A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an…
• CVE-2024-39514 — CVSS 6.5 (medium): An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos and…
• CVE-2022-22224 — CVSS 6.5 (medium): An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Juniper Networks Junos…
• CVE-2024-39517 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) on Juniper Networks…
• CVE-2024-39519 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
• CVE-2022-22215 — CVSS 6.5 (medium): A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module (PAM) of Juniper…
• CVE-2022-22214 — CVSS 6.5 (medium): An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows…
• CVE-2022-22196 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2024-39526 — CVSS 6.5 (medium): An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series with…
• CVE-2024-39535 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
• CVE-2024-39537 — CVSS 6.5 (medium): An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000…
• CVE-2024-39538 — CVSS 6.5 (medium): A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved…
• CVE-2024-39541 — CVSS 6.5 (medium): An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2024-39543 — CVSS 6.5 (medium): A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper…
• CVE-2022-22172 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks…
• CVE-2022-22164 — CVSS 6.5 (medium): An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service…
• CVE-2021-31363 — CVSS 6.5 (medium): In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of Juniper Networks…
• CVE-2024-39553 — CVSS 6.5 (medium): An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks Junos OS Evolved allows an…
• CVE-2021-31362 — CVSS 6.5 (medium): A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2024-39557 — CVSS 6.5 (medium): An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS Evolved…
• CVE-2024-39558 — CVSS 6.5 (medium): An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Networks Junos OS…
• CVE-2024-39560 — CVSS 6.5 (medium): An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2021-0297 — CVSS 6.5 (medium): A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured…
• CVE-2021-0292 — CVSS 6.5 (medium): An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper…
• CVE-2024-47498 — CVSS 6.5 (medium): An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an…
• CVE-2021-0291 — CVSS 6.5 (medium): An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not…
• CVE-2021-0287 — CVSS 6.5 (medium): In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS…
• CVE-2024-47505 — CVSS 6.5 (medium): An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos…
• CVE-2024-47508 — CVSS 6.5 (medium): An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos…
• CVE-2024-47509 — CVSS 6.5 (medium): An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos…
• CVE-2025-21593 — CVSS 6.5 (medium): An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2025-21595 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and…
• CVE-2025-21600 — CVSS 6.5 (medium): An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2025-21602 — CVSS 6.5 (medium): An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2025-30646 — CVSS 6.5 (medium): A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon (l2cpd) of Juniper Networks Junos OS and Juniper…
• CVE-2021-0239 — CVSS 6.5 (medium): In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit…
• CVE-2021-0236 — CVSS 6.5 (medium): Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol…
• CVE-2025-30653 — CVSS 6.5 (medium): An Expired Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2025-52949 — CVSS 6.5 (medium): An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2025-52953 — CVSS 6.5 (medium): An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows…
• CVE-2021-0209 — CVSS 6.5 (medium): In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an…
• CVE-2025-52955 — CVSS 6.5 (medium): An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2025-52961 — CVSS 6.5 (medium): An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management…
• CVE-2025-52964 — CVSS 6.5 (medium): A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2025-59958 — CVSS 6.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS…
• CVE-2020-1681 — CVSS 6.5 (medium): Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved…
• CVE-2025-59967 — CVSS 6.5 (medium): A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7024…
• CVE-2025-59969 — CVSS 6.5 (medium): A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit…
• CVE-2020-1678 — CVSS 6.5 (medium): On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory…
• CVE-2026-21909 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos…
• CVE-2026-21911 — CVSS 6.5 (medium): An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an…
• CVE-2026-21919 — CVSS 6.5 (medium): An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a…
• CVE-2026-21921 — CVSS 6.5 (medium): A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based…
• CVE-2026-33780 — CVSS 6.5 (medium): A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos…
• CVE-2026-33783 — CVSS 6.5 (medium): A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series…
• CVE-2023-28981 — CVSS 6.5 (medium): An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated…
• CVE-2024-39556 — CVSS 6.4 (medium): A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local…
• CVE-2024-39532 — CVSS 6.3 (medium): An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local…
• CVE-2023-44190 — CVSS 6.1 (medium): An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and…
• CVE-2023-44189 — CVSS 6.1 (medium): An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a…
• CVE-2023-22397 — CVSS 6.1 (medium): An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine (PFE) on Juniper…
• CVE-2024-30402 — CVSS 5.9 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks…
• CVE-2022-22225 — CVSS 5.9 (medium): A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2022-22169 — CVSS 5.9 (medium): An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-44187 — CVSS 5.9 (medium): An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authenticated attacker…
• CVE-2022-22219 — CVSS 5.9 (medium): Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS and Junos OS Evolved…
• CVE-2025-52984 — CVSS 5.9 (medium): A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2024-47491 — CVSS 5.9 (medium): An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS…
• CVE-2024-39554 — CVSS 5.9 (medium): A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon…
• CVE-2024-39559 — CVSS 5.9 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS Evolved may allow a…
• CVE-2022-22208 — CVSS 5.9 (medium): A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-22402 — CVSS 5.9 (medium): A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to…
• CVE-2024-21585 — CVSS 5.9 (medium): An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved…
• CVE-2022-22213 — CVSS 5.9 (medium): A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS…
• CVE-2022-22220 — CVSS 5.9 (medium): A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS, Junos OS…
• CVE-2021-0264 — CVSS 5.9 (medium): A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX…
• CVE-2025-60011 — CVSS 5.8 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2021-0225 — CVSS 5.8 (medium): An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter…
• CVE-2024-47489 — CVSS 5.8 (medium): An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of the Juniper Networks Junos OS Evolved…
• CVE-2024-47507 — CVSS 5.8 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2024-39528 — CVSS 5.7 (medium): A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an…
• CVE-2023-36840 — CVSS 5.5 (medium): A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a…
• CVE-2025-30654 — CVSS 5.5 (medium): An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface (UI) of Juniper Networks Junos OS and…
• CVE-2025-30655 — CVSS 5.5 (medium): An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and…
• CVE-2026-33776 — CVSS 5.5 (medium): A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges…
• CVE-2023-44177 — CVSS 5.5 (medium): A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to…
• CVE-2023-44178 — CVSS 5.5 (medium): A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a…
• CVE-2023-28980 — CVSS 5.5 (medium): A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally…
• CVE-2020-1621 — CVSS 5.5 (medium): A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions…
• CVE-2022-22240 — CVSS 5.5 (medium): An Allocation of Resources Without Limits or Throttling and a Missing Release of Memory after Effective Lifetime vulnerability in the…