File and Path Handling

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) servicesCVE-2020-1631Juniper Networks · CVSS 8.8 · 4.9% likely

   CWE-22

2. Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to rootCVE-2021-31385Juniper Networks · CVSS 8.8 · 1.5% likely

   CWE-22

3. Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.CVE-2021-0231Juniper Networks · CVSS 6.5 · 1.3% likely

   CWE-22

4. Junos Space: Unrestricted file upload vulnerabilityCVE-2019-0017Juniper Networks · CVSS 6.5 · 1.1% likely

   CWE-434

5. Junos OS: Path traversal vulnerability in J-WebCVE-2020-1606Juniper Networks · CVSS 5.4 · 0.9% likely

   CWE-22

6. Junos OS: Path traversal vulnerability in J-WebCVE-2022-22245Juniper Networks · CVSS 4.3 · 0.8% likely

   CWE-23

7. Junos OS: NFX Series: 'set system ports console insecure' allows root password recoveryCVE-2023-28972Juniper Networks · CVSS 6.8 · 0.4% likely

   CWE-59

8. Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.CVE-2019-0074Juniper Networks · CVSS 5.5 · 0.4% likely

   CWE-23

9. Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as rootCVE-2026-103401Juniper Networks · CVSS 8.8 · 0.3% likelycovered by CyberSIXT

   CWE-591 article

10. Junos Space: Arbitrary file download vulnerability in web interfaceCVE-2025-59976Juniper Networks · CVSS 6.5 · 0.3% likely

    CWE-552

11. Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI managementCVE-2026-103407Juniper Networks · CVSS 8.8 · 0.2% likely

    CWE-22

12. Junos OS: A low privileged user can escalate their privileges so that they can login as rootCVE-2026-21916Juniper Networks · CVSS 7.3 · 0.1% likely

    CWE-61

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.