JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52986 | 5.5 | Jul 11 | Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-30655 | 5.5 | Apr 9 | Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30654 | 5.5 | Apr 9 | Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-30652 | 5.5 | Apr 9 | Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39513 | 5.5 | Jul 10 | Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30406 | 5.5 | Apr 12 | Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials Affected: 23.1; 23.1; 23.1; 23.1; 23.2; 23.2; +2 more |
| CVE-2023-44201 | 5.5 | Oct 12 | Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user. Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44178 | 5.5 | Oct 12 | Junos OS : Stack overflow vulnerability in CLI command processing Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44176 | 5.5 | Oct 12 | Junos OS : Stack overflow vulnerability in CLI command processing Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44177 | 5.5 | Oct 12 | Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44187 | 5.5 | Oct 11 | Junos OS Evolved: 'file copy' CLI command can disclose password to shell users Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-36840 | 5.5 | Jul 14 | A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28980 | 5.5 | Apr 17 | A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 21.2; +20 more |
| CVE-2023-22398 | 5.5 | Jan 13 | An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +9 more |
| CVE-2022-22240 | 5.5 | Oct 18 | Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +18 more |
| CVE-2022-22233 | 5.5 | Oct 18 | Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash Affected: 21.4; 21.4; 21.4; 21.4; 22.1 |
| CVE-2022-22215 | 5.5 | Jul 20 | A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module (PAM) of Juniper Networks Junos OS and Junos OS Evolved… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2022-22193 | 5.5 | Apr 14 | An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +7 more |
| CVE-2020-1624 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files Affected: before 19.1r1 |
| CVE-2020-1623 | 5.5 | Apr 8 | A local, authenticated user with shell can view sensitive configuration information via the ev.ops configuration file Affected: before 19.2r1 |
| CVE-2020-1622 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore Affected: before 19.1r1 |
| CVE-2020-1621 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces Affected: before 19.3r1 |
| CVE-2020-1620 | 5.5 | Apr 8 | A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log Affected: before 19.3r1 |
| CVE-2025-60010 | 5.4 | Oct 9 | Junos OS and Junos OS Evolved: Device allows login for user with expired password Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2024-39534 | 5.4 | Oct 11 | Junos OS Evolved: Connections to the network and broadcast address accepted Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2023-44190 | 5.4 | Oct 11 | Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +33 more |
| CVE-2023-44189 | 5.4 | Oct 11 | Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +32 more |
| CVE-2026-57029 | 5.3 | Jul 9 | Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash Affected: 23.2; 23.4; 23.4; 23.4; 23.4; 23.4; +25 more |
| CVE-2025-60006 | 5.3 | Oct 9 | Junos OS Evolved: OS command injection vulnerabilities fixed Affected: 24.2; 24.2; 24.2; 24.2; 24.2; 24.4; +3 more |
| CVE-2025-59962 | 5.3 | Oct 9 | Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash Affected: before 22.3; 22.3; 22.3; 22.3; 22.3; 22.3; +16 more |
| CVE-2025-52985 | 5.3 | Jul 11 | Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching Affected: 23.2; 23.4; 23.4; 24.2; 24.4; 24.4; +2 more |
| CVE-2025-52958 | 5.3 | Jul 11 | Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-21597 | 5.3 | Apr 9 | Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39536 | 5.3 | Jul 11 | Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30402 | 5.3 | Apr 12 | Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30390 | 5.3 | Apr 12 | Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +29 more |
| CVE-2024-30386 | 5.3 | Apr 12 | Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30409 | 5.3 | Apr 12 | Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS). Affected: 22.1; 22.1; 22.1 |
| CVE-2024-21596 | 5.3 | Jan 12 | Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 21.3; +34 more |
| CVE-2023-44195 | 5.3 | Oct 12 | Junos OS Evolved: Packets which are not destined to the router can reach the RE Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +33 more |
| CVE-2023-28978 | 5.3 | Apr 17 | An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain confidential… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2022-22227 | 5.3 | Oct 18 | Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +17 more |
| CVE-2022-22164 | 5.3 | Jan 19 | An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected,… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +5 more |
| CVE-2021-0273 | 5.3 | Apr 22 | An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240,… Affected: 19.4; 19.4 |
| CVE-2025-52989 | 5.1 | Jul 11 | Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2024-39544 | 5.0 | Oct 11 | Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21615 | 5.0 | Apr 12 | Junos OS and Junos OS Evolved: A low-privileged user can access confidential information Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2023-36836 | 4.7 | Jul 14 | A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2021-0298 | 4.7 | Oct 19 | A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the… Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +5 more |
| CVE-2026-21901 | 4.4 | Jul 9 | Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash Affected: 22.3; 22.3; 22.3; 22.3; 22.3; 22.3; +34 more |