Misconfiguration and Insecure Design

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.CVE-2020-1640Juniper Networks · CVSS 7.5 · 1.4% likely

   CWE-1173

2. Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interfaceCVE-2022-22152Juniper Networks · CVSS 7.7 · 0.8% likely

   CWE-693

3. Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.CVE-2021-0222Juniper Networks · CVSS 7.4 · 0.6% likely

   CWE-16

4. Junos OS Evolved: Read access to some confidential user information is possibleCVE-2023-28978Juniper Networks · CVSS 5.3 · 0.5% likely

   CWE-1188

5. Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoSCVE-2021-31362Juniper Networks · CVSS 6.5 · 0.4% likely

   CWE-693

6. Junos OS: IPv6 firewall filter fails to match payload-protocolCVE-2025-52951Juniper Networks · CVSS 5.8 · 0.4% likely

   CWE-693

7. Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalationCVE-2019-0061Juniper Networks · CVSS 7.8 · 0.4% likely

   CWE-657

8. Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejectedCVE-2024-21607Juniper Networks · CVSS 5.3 · 0.3% likely

   CWE-447

9. Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are usedCVE-2024-39533Juniper Networks · CVSS 5.8 · 0.3% likely

   CWE-447

10. Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressedCVE-2025-52987Juniper Networks · CVSS 6.1 · 0.3% likely

    CWE-1021

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.