Skip to content

Juniper Networks · weakness class

Information Disclosure

45 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S…CVE-2016-1279Juniper · 2.9% likely

    CWE-200

  2. Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters,…CVE-2008-1181Juniper · 2.5% likely

    CWE-200

  3. The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different me…CVE-2015-7322Juniper · 2.3% likely

    CWE-200

  4. Junos Space: privilege escalation vulnerabilities in Junos SpaceCVE-2016-1265Juniper Networks · CVSS 9.8 · 2.3% likely

    CWE-200

  5. Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interfaceCVE-2019-0040Juniper Networks · CVSS 6.5 · 1.9% likely

    CWE-200

  6. A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to ca…CVE-2017-2320Juniper Networks · 1.9% likely

    CWE-200

  7. Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, d…CVE-2017-2304Juniper Networks · 1.8% likely

    CWE-200

  8. SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.CVE-2018-0018Juniper Networks · CVSS 7.5 · 1.6% likely

    CWE-200

  9. Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfacesCVE-2020-1628Juniper Networks · CVSS 5.3 · 1.3% likely

    CWE-200

  10. Junos Space: Local File Inclusion VulnerabilityCVE-2018-0013Juniper Networks · CVSS 6.5 · 1.2% likely

    CWE-200

  11. SRC Series: A remote attacker sending a specially crafted query may cause the web server to delete filesCVE-2021-31381Juniper Networks · CVSS 6.5 · 1.2% likely

    CWE-200

  12. Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability.CVE-2018-0042Juniper · 1.1% likely

    CWE-532

  13. An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, networ…CVE-2017-2326Juniper Networks · 1.1% likely

    CWE-200

  14. SRC Series: A remote attacker sending a specially crafted query may cause the web server to disclose sensitive informationCVE-2021-31380Juniper Networks · CVSS 5.3 · 1.1% likely

    CWE-200

  15. Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active sessionCVE-2021-0210Juniper Networks · CVSS 6.8 · 1.1% likely

    CWE-200

  16. Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.CVE-2022-22183Juniper Networks · CVSS 7.5 · 1.0% likely

    CWE-200

  17. Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of ServiceCVE-2021-0291Juniper Networks · CVSS 6.5 · 1.0% likely

    CWE-497

  18. A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will c…CVE-2017-2318Juniper Networks · 1.0% likely

    CWE-200

  19. An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perfor…CVE-2017-2334Juniper Networks · 1.0% likely

    CWE-200

  20. EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may failCVE-2019-0048Juniper Networks · CVSS 5.8 · 1.0% likely

    CWE-200

  21. A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-ba…CVE-2017-2317Juniper Networks · 0.9% likely

    CWE-200

  22. Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.CVE-2021-0260Juniper Networks · CVSS 7.3 · 0.9% likely

    CWE-497

  23. Junos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.CVE-2021-31371Juniper Networks · CVSS 5.3 · 0.8% likely

    CWE-200

  24. SRC Series: NETCONF over SSH allows negotiation of weak ciphersCVE-2021-31352Juniper Networks · CVSS 5.3 · 0.8% likely

    CWE-200

  25. On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible…CVE-2017-2309Juniper Networks · 0.8% likely

    CWE-200

  26. Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 1…CVE-2013-6014Juniper · 0.8% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.