# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.](https://agentprime.io/advisories/CVE-2021-0231.md) `CVE-2021-0231` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Path traversal - [Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics](https://agentprime.io/advisories/CVE-2021-0230.md) `CVE-2021-0230` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service - [Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server](https://agentprime.io/advisories/CVE-2021-0229.md) `CVE-2021-0229` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service - [Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment](https://agentprime.io/advisories/CVE-2021-0228.md) `CVE-2021-0228` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754 - [Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets](https://agentprime.io/advisories/CVE-2021-0227.md) `CVE-2021-0227` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021 · Tags: Memory corruption - [Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit](https://agentprime.io/advisories/CVE-2021-0224.md) `CVE-2021-0224` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service - [Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets](https://agentprime.io/advisories/CVE-2021-0216.md) `CVE-2021-0216` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 - [Junos OS: Denial of Service in ppmd upon receipt of malformed packet](https://agentprime.io/advisories/CVE-2021-0214.md) `CVE-2021-0214` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-20 - [Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries](https://agentprime.io/advisories/CVE-2021-0223.md) `CVE-2021-0223` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2021 · Tags: Privilege escalation - [Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.](https://agentprime.io/advisories/CVE-2021-0222.md) `CVE-2021-0222` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-16 - [Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic](https://agentprime.io/advisories/CVE-2021-0221.md) `CVE-2021-0221` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-703 - [Junos OS: Command injection vulnerability in 'request system software' CLI command](https://agentprime.io/advisories/CVE-2021-0219.md) `CVE-2021-0219` · CVE record: Juniper Networks Junos OS · CVSS 6.7 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: Command injection - [Junos OS: Command injection vulnerability in license-check daemon](https://agentprime.io/advisories/CVE-2021-0218.md) `CVE-2021-0218` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2021 · Tags: Command injection - [Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets](https://agentprime.io/advisories/CVE-2021-0217.md) `CVE-2021-0217` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 15 Jan 2021 · Tags: Memory corruption - [Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps](https://agentprime.io/advisories/CVE-2021-0215.md) `CVE-2021-0215` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.](https://agentprime.io/advisories/CVE-2021-0211.md) `CVE-2021-0211` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jan 2021 - [Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session](https://agentprime.io/advisories/CVE-2021-0210.md) `CVE-2021-0210` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.](https://agentprime.io/advisories/CVE-2021-0208.md) `CVE-2021-0208` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-20 - [NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.](https://agentprime.io/advisories/CVE-2021-0207.md) `CVE-2021-0207` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-115, CWE-436 - [Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.](https://agentprime.io/advisories/CVE-2021-0206.md) `CVE-2021-0206` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2021 · Tags: Memory corruption - [Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix](https://agentprime.io/advisories/CVE-2021-0205.md) `CVE-2021-0205` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: Broken access control - [Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries](https://agentprime.io/advisories/CVE-2021-0204.md) `CVE-2021-0204` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2021 · Tags: Privilege escalation - [Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured](https://agentprime.io/advisories/CVE-2021-0203.md) `CVE-2021-0203` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-794 - [Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain](https://agentprime.io/advisories/CVE-2021-0202.md) `CVE-2021-0202` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2021 · Tags: Denial of service - [Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration](https://agentprime.io/advisories/CVE-2020-1689.md) `CVE-2020-1689` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: SRX and NFX Series: Insufficient Web API private key protection](https://agentprime.io/advisories/CVE-2020-1688.md) `CVE-2020-1688` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Information disclosure, Hard-coded credentials, CWE-320 - [Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.](https://agentprime.io/advisories/CVE-2020-1687.md) `CVE-2020-1687` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.](https://agentprime.io/advisories/CVE-2020-1686.md) `CVE-2020-1686` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: Memory corruption - [Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action](https://agentprime.io/advisories/CVE-2020-1685.md) `CVE-2020-1685` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Information disclosure - [Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.](https://agentprime.io/advisories/CVE-2020-1684.md) `CVE-2020-1684` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling](https://agentprime.io/advisories/CVE-2020-1683.md) `CVE-2020-1683` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command](https://agentprime.io/advisories/CVE-2020-1682.md) `CVE-2020-1682` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-20 - [Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.](https://agentprime.io/advisories/CVE-2020-1680.md) `CVE-2020-1680` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Memory corruption - [Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.](https://agentprime.io/advisories/CVE-2020-1679.md) `CVE-2020-1679` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.](https://agentprime.io/advisories/CVE-2020-1678.md) `CVE-2020-1678` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services](https://agentprime.io/advisories/CVE-2020-1673.md) `CVE-2020-1673` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2020 · Tags: Cross-site scripting (XSS) - [Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.](https://agentprime.io/advisories/CVE-2020-1672.md) `CVE-2020-1672` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-20 - [Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.](https://agentprime.io/advisories/CVE-2020-1671.md) `CVE-2020-1671` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: Memory corruption - [Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets](https://agentprime.io/advisories/CVE-2020-1670.md) `CVE-2020-1670` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: NFX350: Password hashes stored in world-readable format](https://agentprime.io/advisories/CVE-2020-1669.md) `CVE-2020-1669` · CVE record: Juniper Networks Junos OS · CVSS 6.3 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-256 - [Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface](https://agentprime.io/advisories/CVE-2020-1668.md) `CVE-2020-1668` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service - [Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.](https://agentprime.io/advisories/CVE-2020-1667.md) `CVE-2020-1667` · CVE record: Juniper Networks Junos OS · CVSS 8.3 High · Not analysed yet · Published 16 Oct 2020 · Tags: Race condition - [Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.](https://agentprime.io/advisories/CVE-2020-1665.md) `CVE-2020-1665` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-794 - [Junos OS: Buffer overflow vulnerability in device control daemon](https://agentprime.io/advisories/CVE-2020-1664.md) `CVE-2020-1664` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2020 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.](https://agentprime.io/advisories/CVE-2020-1662.md) `CVE-2020-1662` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-20 - [Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.](https://agentprime.io/advisories/CVE-2020-1661.md) `CVE-2020-1661` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2020 - [Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.](https://agentprime.io/advisories/CVE-2020-1660.md) `CVE-2020-1660` · CVE record: Juniper Networks Junos OS · CVSS 8.3 High · Not analysed yet · Published 16 Oct 2020 · Tags: Race condition - [Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.](https://agentprime.io/advisories/CVE-2020-1657.md) `CVE-2020-1657` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-408 - [Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.](https://agentprime.io/advisories/CVE-2020-1656.md) `CVE-2020-1656` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2020 · Tags: Memory corruption, CWE-20 - [Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation](https://agentprime.io/advisories/CVE-2020-1655.md) `CVE-2020-1655` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2020 - [Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution](https://agentprime.io/advisories/CVE-2020-1654.md) `CVE-2020-1654` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2020 · Tags: Memory corruption - [Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak](https://agentprime.io/advisories/CVE-2020-1653.md) `CVE-2020-1653` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-159 - [Junos OS: MX Series: PFE on the line card may crash due to memory leak.](https://agentprime.io/advisories/CVE-2020-1651.md) `CVE-2020-1651` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-19 - [Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC](https://agentprime.io/advisories/CVE-2020-1650.md) `CVE-2020-1650` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 - [Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly](https://agentprime.io/advisories/CVE-2020-1649.md) `CVE-2020-1649` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 - [Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet](https://agentprime.io/advisories/CVE-2020-1648.md) `CVE-2020-1648` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-159, CWE-690 - [Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled](https://agentprime.io/advisories/CVE-2020-1647.md) `CVE-2020-1647` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2020 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.](https://agentprime.io/advisories/CVE-2020-1646.md) `CVE-2020-1646` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-159 - [Junos OS: MX Series: Services card might restart when DNS filtering is enabled](https://agentprime.io/advisories/CVE-2020-1645.md) `CVE-2020-1645` · CVE record: Juniper Networks Junos OS · CVSS 8.3 High · Not analysed yet · Published 17 Jul 2020 · Tags: Race condition - [Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets](https://agentprime.io/advisories/CVE-2020-1644.md) `CVE-2020-1644` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-703 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .