CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Juniper Networks Junos OS Kernel Improper Isolation Local Code Injection Vulnerability (CVE-2025-21590)
[Affected Scope] Junos OS versions prior to 21.2R3-S9, 21.4R3-S10, 22.2R3-S6, 22.4R3-S6, 23.2R2-S3, 23.4R2-S4, and 24.2R1-S2/24.2R2
[Impact] A highly privileged local attacker with shell access can inject arbitrary code to compromise the integrity of the device
[Mitigation] Immediately upgrade to the recommended patched Junos OS releases and restrict local shell access to authorized administrators only
Juniper Networks Junos OS (SRX Series) J-Web Unauthenticated Arbitrary File Upload and Download Vulnerability (CVE-2023-36851) Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS on SRX Series devices with the J-Web interface enabled in specific vulnerable versions
[Impact] Unauthenticated network-based attackers can send crafted requests to webauth_operation.php to upload or download arbitrary files, compromising file system integrity and potentially chaining to remote code execution (RCE)
[Mitigation] Immediately upgrade Junos OS to the recommended patched release, or disable the J-Web interface / restrict access to trusted IP addresses
Juniper Networks Junos OS EX Series J-Web Unauthenticated Arbitrary File Upload Vulnerability (CVE-2023-36847) Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS on EX Series switches with J-Web interface enabled in specific versions
[Impact] Unauthenticated, network-based attackers can upload arbitrary files via J-Web by targeting 'installAppPackage.php', compromising file system integrity and potentially chaining with other flaws for Remote Code Execution (RCE)
[Mitigation] Upgrade Junos OS to the recommended patched releases, or immediately disable the J-Web service and restrict management access
Juniper Junos OS SRX Series J-Web Unauthenticated Arbitrary File Upload Vulnerability (CVE-2023-36846) Technical Advisory
[Affected Scope] Juniper Networks Junos OS SRX Series firewalls with the J-Web interface enabled
[Impact] Unauthenticated remote attackers can upload arbitrary files via crafted HTTP requests to the file system, compromising integrity and potentially chaining with other flaws to achieve Remote Code Execution (RCE)
[Mitigation] Apply the latest Junos OS security updates immediately, or disable the J-Web interface and restrict access to trusted management IP ranges
Juniper Networks Junos OS J-Web External Variable Modification Vulnerability (CVE-2023-36845) Remote Code Execution Analysis and Mitigation Guide
[Affected Scope] Juniper Networks Junos OS on EX Series switches and SRX Series firewalls with the J-Web interface enabled
[Impact] An unauthenticated, network-based attacker can modify the PHP execution environment (PHPRC) via crafted HTTP requests, leading to arbitrary code execution and full device compromise
[Mitigation] Immediately upgrade Junos OS to the patched versions, or disable the J-Web interface and restrict access to trusted IP addresses as a temporary workaround
Juniper Junos OS EX Series J-Web PHP External Variable Modification Vulnerability (CVE-2023-36844) Security Advisory
[Affected Scope] Juniper Networks Junos OS EX Series switches with the J-Web interface enabled
[Impact] Unauthenticated, network-based attackers can manipulate PHP environment variables, potentially leading to unauthorized file uploads and remote code execution (RCE) when chained
[Mitigation] Apply the latest Junos OS security patches immediately, or disable the J-Web service / restrict access to trusted IP addresses
Juniper ScreenOS Remote Administrative Access Backdoor Vulnerability (CVE-2015-7755) Analysis and Mitigation Guide
[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20
[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password
[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access