Browse CVEs

MEDIUM 6.7 CVE-2021-0219 A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacke… Junos Mitigation only Fix from $1,6002021-01-15 MEDIUM 6.5 CVE-2021-0209 In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized point… Junos Os Evolved Mitigation only Fix from $1,6002021-01-15 MEDIUM 6.5 CVE-2021-0215 On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator po… Junos No fix yet Fix from $1,6002021-01-15 MEDIUM 6.5 CVE-2021-0221 In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of s… Junos Mitigation only Fix from $1,6002021-01-15 MEDIUM 5.0 CVE-2021-0212 An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve … Contrail Networking 1911.31+ Fix from $1,6002021-01-15 HIGH 8.8 CVE-2021-0208 An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a mal… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 8.6 CVE-2021-0203 On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface mig… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 7.8 CVE-2021-0204 A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authen… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 7.5 CVE-2021-0202 On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB)… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 7.5 CVE-2021-0206 A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engi… Junos Mitigation only Fix from $1,9502021-01-15 HIGH 7.5 CVE-2021-0207 An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow c… Junos Mitigation only Fix from $1,9502021-01-15 MEDIUM 5.8 CVE-2021-0205 When the "Intrusion Detection Service" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or … Junos Mitigation only Fix from $1,6002021-01-15 HIGH 7.5 CVE-2020-1683 On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore). Prior to the ke… Junos Mitigation only Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1684 On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU loa… Junos Mitigation only Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1686 On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore). This issue can be trigge… Junos Mitigation only Fix from $1,9502020-10-16 MEDIUM 6.5 CVE-2020-1687 On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, re… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1688 On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1689 On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific lay… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 5.8 CVE-2020-1685 When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol (VXLAN), the… Junos Mitigation only Fix from $1,6002020-10-16 HIGH 8.8 CVE-2020-1673 Insufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP/HTTPS) services allows an unauthenticated attacker t… Junos Mitigation only Fix from $1,9502020-10-16 HIGH 8.3 CVE-2020-1675 When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentica… Mist Cloud Ui 2020-09-02+ Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1671 On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol … Junos Mitigation only Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1672 On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdh… Junos Mitigation only Fix from $1,9502020-10-16 HIGH 7.5 CVE-2020-1679 On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet… Junos Mitigation only Fix from $1,9502020-10-16 HIGH 7.2 CVE-2020-1676 When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a v… Mist Cloud Ui 2020-09-02+ Fix from $1,9502020-10-16 HIGH 7.2 CVE-2020-1677 When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote atta… Mist Cloud Ui 2020-09-02+ Fix from $1,9502020-10-16 MEDIUM 6.5 CVE-2020-1678 On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the m… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1681 Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause… Junos Os Evolved Mitigation only Fix from $1,6002020-10-16 MEDIUM 5.5 CVE-2020-1682 An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service … Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 5.3 CVE-2020-1680 On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC… Junos Mitigation only Fix from $1,6002020-10-16