# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received](https://agentprime.io/advisories/CVE-2023-22404.md) `CVE-2023-22404` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic](https://agentprime.io/advisories/CVE-2023-22403.md) `CVE-2023-22403` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash](https://agentprime.io/advisories/CVE-2023-22401.md) `CVE-2023-22401` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-129 - [Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled](https://agentprime.io/advisories/CVE-2023-22399.md) `CVE-2023-22399` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs](https://agentprime.io/advisories/CVE-2023-22398.md) `CVE-2023-22398` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2023-22396.md) `CVE-2023-22396` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity](https://agentprime.io/advisories/CVE-2023-22395.md) `CVE-2023-22395` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls](https://agentprime.io/advisories/CVE-2023-22394.md) `CVE-2023-22394` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-911 - [Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop](https://agentprime.io/advisories/CVE-2023-22393.md) `CVE-2023-22393` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-358, CWE-754 - [Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2023-22391.md) `CVE-2023-22391` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1](https://agentprime.io/advisories/CVE-2022-22184.md) `CVE-2022-22184` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 23 Dec 2022 · Tags: CWE-20 - [cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges](https://agentprime.io/advisories/CVE-2022-22251.md) `CVE-2022-22251` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-257, CWE-275 - [Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote](https://agentprime.io/advisories/CVE-2022-22250.md) `CVE-2022-22250` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-664 - [Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain](https://agentprime.io/advisories/CVE-2022-22249.md) `CVE-2022-22249` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-664 - [Junos OS: PHP file inclusion vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22246.md) `CVE-2022-22246` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-829 - [Junos OS: Path traversal vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22245.md) `CVE-2022-22245` · CVE record: Juniper Networks Junos OS · CVSS 4.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Path traversal - [Junos OS: Unauthenticated XPath Injection vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22244.md) `CVE-2022-22244` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Other injection - [Junos OS: XPath Injection vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22243.md) `CVE-2022-22243` · CVE record: Juniper Networks Junos OS · CVSS 4.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20 - [Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22242.md) `CVE-2022-22242` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Cross-site scripting (XSS) - [Junos OS: Vulnerability in J-Web may allow deserialization without authentication](https://agentprime.io/advisories/CVE-2022-22241.md) `CVE-2022-22241` · CVE record: Juniper Networks Junos OS · CVSS 8.1 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario](https://agentprime.io/advisories/CVE-2022-22240.md) `CVE-2022-22240` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Denial of service - [Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed](https://agentprime.io/advisories/CVE-2022-22238.md) `CVE-2022-22238` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-754 - [Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally](https://agentprime.io/advisories/CVE-2022-22237.md) `CVE-2022-22237` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Authentication bypass - [Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash](https://agentprime.io/advisories/CVE-2022-22236.md) `CVE-2022-22236` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: Memory corruption - [Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed](https://agentprime.io/advisories/CVE-2022-22235.md) `CVE-2022-22235` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-754 - [Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy](https://agentprime.io/advisories/CVE-2022-22234.md) `CVE-2022-22234` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1250 - [Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash](https://agentprime.io/advisories/CVE-2022-22233.md) `CVE-2022-22233` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-690 - [SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash](https://agentprime.io/advisories/CVE-2022-22232.md) `CVE-2022-22232` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: Memory corruption - [SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash](https://agentprime.io/advisories/CVE-2022-22231.md) `CVE-2022-22231` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-690 - [Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs](https://agentprime.io/advisories/CVE-2022-22230.md) `CVE-2022-22230` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20 - [Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet](https://agentprime.io/advisories/CVE-2022-22228.md) `CVE-2022-22228` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1287 - [Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash](https://agentprime.io/advisories/CVE-2022-22226.md) `CVE-2022-22226` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash](https://agentprime.io/advisories/CVE-2022-22225.md) `CVE-2022-22225` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Race condition - [Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV](https://agentprime.io/advisories/CVE-2022-22224.md) `CVE-2022-22224` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-703 - [Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.](https://agentprime.io/advisories/CVE-2022-22223.md) `CVE-2022-22223` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1285 - [Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route](https://agentprime.io/advisories/CVE-2022-22220.md) `CVE-2022-22220` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Race condition - [Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment](https://agentprime.io/advisories/CVE-2022-22219.md) `CVE-2022-22219` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-241 - [Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment](https://agentprime.io/advisories/CVE-2022-22218.md) `CVE-2022-22218` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions](https://agentprime.io/advisories/CVE-2022-22208.md) `CVE-2022-22208` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Memory corruption - [SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet](https://agentprime.io/advisories/CVE-2022-22201.md) `CVE-2022-22201` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1285 - [Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality](https://agentprime.io/advisories/CVE-2022-22221.md) `CVE-2022-22221` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 20 Jul 2022 - [Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN](https://agentprime.io/advisories/CVE-2022-22217.md) `CVE-2022-22217` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-754 - [Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data](https://agentprime.io/advisories/CVE-2022-22216.md) `CVE-2022-22216` · CVE record: Juniper Networks Junos OS · CVSS 4.3 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: /var/run/\.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion](https://agentprime.io/advisories/CVE-2022-22215.md) `CVE-2022-22215` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 - [Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash](https://agentprime.io/advisories/CVE-2022-22214.md) `CVE-2022-22214` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update](https://agentprime.io/advisories/CVE-2022-22213.md) `CVE-2022-22213` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-232 - [Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario](https://agentprime.io/advisories/CVE-2022-22210.md) `CVE-2022-22210` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: Memory corruption - [Junos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churn](https://agentprime.io/advisories/CVE-2022-22209.md) `CVE-2022-22209` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Denial of service - [Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash](https://agentprime.io/advisories/CVE-2022-22207.md) `CVE-2022-22207` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Memory corruption - [Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search](https://agentprime.io/advisories/CVE-2022-22206.md) `CVE-2022-22206` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Memory corruption - [Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario](https://agentprime.io/advisories/CVE-2022-22205.md) `CVE-2022-22205` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Denial of service - [Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic](https://agentprime.io/advisories/CVE-2022-22204.md) `CVE-2022-22204` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: Denial of service - [Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot](https://agentprime.io/advisories/CVE-2022-22203.md) `CVE-2022-22203` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-697 - [Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations](https://agentprime.io/advisories/CVE-2022-22202.md) `CVE-2022-22202` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-755 - [Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format](https://agentprime.io/advisories/CVE-2022-22198.md) `CVE-2022-22198` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening](https://agentprime.io/advisories/CVE-2022-22197.md) `CVE-2022-22197` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-672 - [Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received](https://agentprime.io/advisories/CVE-2022-22196.md) `CVE-2022-22196` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-754 - [Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash](https://agentprime.io/advisories/CVE-2022-22195.md) `CVE-2022-22195` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-911 - [Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart](https://agentprime.io/advisories/CVE-2022-22194.md) `CVE-2022-22194` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash](https://agentprime.io/advisories/CVE-2022-22193.md) `CVE-2022-22193` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-241 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .