CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Juniper Junos OS SRX Series J-Web Unauthenticated Arbitrary File Upload Vulnerability (CVE-2023-36846) Technical Advisory
[Affected Scope] Juniper Networks Junos OS SRX Series firewalls with the J-Web interface enabled
[Impact] Unauthenticated remote attackers can upload arbitrary files via crafted HTTP requests to the file system, compromising integrity and potentially chaining with other flaws to achieve Remote Code Execution (RCE)
[Mitigation] Apply the latest Junos OS security updates immediately, or disable the J-Web interface and restrict access to trusted management IP ranges
Juniper Junos OS EX Series J-Web PHP External Variable Modification Vulnerability (CVE-2023-36844) Security Advisory
[Affected Scope] Juniper Networks Junos OS EX Series switches with the J-Web interface enabled
[Impact] Unauthenticated, network-based attackers can manipulate PHP environment variables, potentially leading to unauthorized file uploads and remote code execution (RCE) when chained
[Mitigation] Apply the latest Junos OS security patches immediately, or disable the J-Web service / restrict access to trusted IP addresses