JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44182 | 8.8 | Oct 13 | An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +20 more |
| CVE-2023-28983 | 8.8 | Apr 17 | An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged,… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +5 more |
| CVE-2022-22239 | 8.8 | Oct 18 | Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +20 more |
| CVE-2021-31354 | 8.8 | Oct 19 | An Out Of Bounds (OOB) access vulnerability in the handling of responses by a Juniper Agile License (JAL) Client in Juniper Networks Junos OS and Junos OS Evolved, configured in… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +30 more |
| CVE-2021-31350 | 8.8 | Oct 19 | An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit (JET) API on Juniper Networks Junos OS and Junos OS Evolved, allows a… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +17 more |
| CVE-2021-0208 | 8.8 | Jan 15 | An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when… Affected: 19.3; 19.3; 19.4; 19.4; 19.4; 20.1; +2 more |
| CVE-2020-1632 | 8.6 | Apr 15 | In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to… Affected: 19.2 |
| CVE-2024-47490 | 8.2 | Oct 11 | Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2023-28960 | 8.2 | Apr 17 | An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +24 more |
| CVE-2026-33788 | 7.8 | Apr 9 | Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2026-33793 | 7.8 | Apr 9 | Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +33 more |
| CVE-2025-52954 | 7.8 | Jul 11 | Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2024-39524 | 7.8 | Jul 11 | Junos OS Evolved: CLI parameter processing issue allows privilege escalation Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39523 | 7.8 | Jul 11 | Junos OS Evolved: CLI parameter processing issue allows privilege escalation Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39522 | 7.8 | Jul 11 | Junos OS Evolved: CLI parameter processing issue allows privilege escalation Affected: 22.3; 22.3; 22.3; 22.3; 22.4; 22.4 |
| CVE-2024-39521 | 7.8 | Jul 11 | Junos OS Evolved: CLI parameter processing issue allows privilege escalation Affected: 21.1 before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39520 | 7.8 | Jul 11 | Junos OS Evolved: CLI parameter processing issue allows privilege escalation Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28966 | 7.8 | Apr 17 | An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +18 more |
| CVE-2021-31359 | 7.8 | Oct 19 | A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon (jdhcpd) process… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2021-31358 | 7.8 | Oct 19 | A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2021-31357 | 7.8 | Oct 19 | A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2021-31356 | 7.8 | Oct 19 | A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured… Affected: through 20.3; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2025-60003 | 7.5 | Jan 15 | Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-60004 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash Affected: 23.4; 23.4; 23.4; 24.2; 24.4; 24.4; +2 more |
| CVE-2025-52946 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +25 more |
| CVE-2025-30651 | 7.5 | Apr 9 | Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39564 | 7.5 | Feb 5 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21598 | 7.5 | Jan 9 | Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash Affected: 21.4; 21.4; 22.2; 22.3; 22.3; 22.4; +12 more |
| CVE-2025-21599 | 7.5 | Jan 9 | Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service Affected: 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +21 more |
| CVE-2024-47502 | 7.5 | Oct 11 | Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-47499 | 7.5 | Oct 11 | Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39525 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39516 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39515 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39552 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39549 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak Affected: through 21.1; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39548 | 7.5 | Jul 11 | Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39542 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +13 more |
| CVE-2024-39531 | 7.5 | Jul 11 | Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39562 | 7.5 | Jul 10 | Junos OS Evolved: A high rate of SSH connections causes a Denial of Service Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +26 more |
| CVE-2024-39555 | 7.5 | Jul 10 | Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30382 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +27 more |
| CVE-2024-30394 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30395 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21598 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21614 | 7.5 | Jan 12 | Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash Affected: 22.2; 22.2; 22.2; 22.2; 22.2; 22.3; +3 more |
| CVE-2024-21612 | 7.5 | Jan 12 | Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21611 | 7.5 | Jan 12 | Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +13 more |
| CVE-2024-21604 | 7.5 | Jan 12 | Junos OS Evolved: A high rate of specific traffic will cause a complete system outage Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21602 | 7.5 | Jan 12 | Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +26 more |