Juniper vulnerabilities in CISA KEV
Juniper has 8 vulnerabilities in CISA's catalogue of flaws known to be exploited, the 34th highest of any vendor. none were added in the last 12 months; none are linked to known ransomware use (0% of its entries, against 20.4% across the catalogue). CISA's median fix window for these entries is 4 days (range 4 to 21), against 21 days (range 1 to 184) across the whole catalogue. The most exploited product is Junos OS, with 7 entries. Other frequently affected products: ScreenOS (1).
Catalog v2026.11.04, released 5 Nov 2026. Source CISA ↗. All KEV entries.
$ ./kev --vendor juniper --summary
Counts are computed from the catalog release on ; the 12 month window ends there.
┌─ total entries
8
in CISA KEV
┌─ first added
2022-03-25
earliest entry
┌─ latest added
2025-10-02
most recent entry
┌─ last 12 months
0
entries added
┌─ ransomware use
0 of 8
0% linked to ransomware
┌─ distinct products
2
affected products
$ awk -F, {print $1} /var/log/kev/juniper.log | uniq -c
Entries by the year CISA added them.
| Year | Entries added | Of which ransomware |
|---|---|---|
| 2022 | 1 | 0 |
| 2023 | 5 | 0 |
| 2025 | 2 | 0 |
$ sort /var/log/kev/juniper.log | uniq -c | sort -rn | head -5
The five products with the most entries in the catalogue.
- Junos OS 7 entries
- ScreenOS 1 entry
$ kev-due-dates --vendor juniper
Days between the date CISA added an entry and the due date it set, median and range. Due dates apply to US federal agencies; for everyone else they are a patch-first ranking signal.
┌─ Juniper
4 days (range 4 to 21)
median and range in days
┌─ whole catalogue
21 days (range 1 to 184)
median and range in days
$ grep -o 'CWE-[0-9]*' /var/log/kev/juniper.log | sort | uniq -c | sort -rn | head -3
Weakness types CISA records for these entries (8 of 8 have at least one CWE).
$ grep -ril 'Juniper' /var/log/news | head -5
Our reporting that names Juniper or one of its KEV CVE ids, newest first.
┌─ /var/log/news
Patch Week pages with these entries
No Patch Week page covers this vendor yet.
$ wc -l ./juniper.kev · 8 rows
Descriptions: CISA Known Exploited Vulnerabilities catalogue
- CVE-2015-7755
ScreenOS
Juniper ScreenOS Improper Authentication Vulnerability
due 2025-10-23 · CWE-287
$ cat CVE-2015-7755.txt
Description. Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2025-21590
Junos OS
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
due 2025-04-03 · CWE-653
$ cat CVE-2025-21590.txt
Description. Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.
Required action. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CVE-2023-36844
Junos OS
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
due 2023-11-17 · CWE-473
$ cat CVE-2023-36844.txt
Description. Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2023-36845
Junos OS
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
due 2023-11-17 · CWE-473
$ cat CVE-2023-36845.txt
Description. Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2023-36846
Junos OS
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
due 2023-11-17 · CWE-306
$ cat CVE-2023-36846.txt
Description. Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2023-36847
Junos OS
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
due 2023-11-17 · CWE-306
$ cat CVE-2023-36847.txt
Description. Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2023-36851
Junos OS
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
due 2023-11-17 · CWE-306
$ cat CVE-2023-36851.txt
Description. Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.
Required action. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CVE-2020-1631
Junos OS
Juniper Junos OS Path Traversal Vulnerability
due 2022-04-15 · CWE-22 CWE-73
$ cat CVE-2020-1631.txt
Description. A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.
Required action. Apply updates per vendor instructions.