Juniper Networks, Inc.
First CVE: Mar 20, 2017Active for: 9 years
929
CVEs Published
More CVEs Published than 91% of tracked CNAs
92.9
Avg CVEs / Year
More Avg CVEs / Year than 89% of tracked CNAs
6.9
Avg CVSS Score
Higher Avg CVSS Score than 40% of tracked CNAs
0.8%
In CISA KEV
Higher KEV Rate than 87% of tracked CNAs
Self-Reporting Analysis
Of all the CVEs published by Juniper Networks, Inc. as a CNA, 99.6% affect products that Juniper Networks, Inc. develops as a vendor.
99.6%
Self-reported: 925Third-party: 4
Of all the CVEs published that affect products developed by Juniper Networks, Inc., 83.3% are self-published by Juniper Networks, Inc. as a CNA.
83.3%
16.7%
Self-published: 925Published by other CNAs: 185
Trends Over Time
The number and severity of CVEs published by Juniper Networks, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 20, 2017
9 years ago
Most Recent CVE
Jul 9, 2026
14 days ago
Top CVEs
All CVEs published by Juniper Networks, Inc. as a CNA, regardless of affected vendor or product.
929 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36845CRITICAL A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remote | Aug 17, 2023 | 9.8 | 98 | YES | YES |
CVE-2023-36844MEDIUM A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, importan | Aug 17, 2023 | 5.3 | 95 | YES | YES |
CVE-2023-36846MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 93 | YES | NO |
CVE-2023-36847MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 91 | YES | NO |
CVE-2020-1631CRITICAL A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning | May 4, 2020 | 9.8 | 72 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2025-21590MEDIUM An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of t | Mar 12, 2025 | 4.4 | 56 | YES | NO |
CVE-2026-21902CRITICAL An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauth | Feb 25, 2026 | 9.8 | 51 | NO | NO |
CVE-2024-21591CRITICAL
An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Servi | Jan 12, 2024 | 9.8 | 40 | NO | NO |
CVE-2026-33784CRITICAL A Use of Default Password vulnerability in the Juniper Networks
Support Insights (JSI)
Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to | Apr 9, 2026 | 9.8 | 38 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA929 CVEs
52%
42%
Severity distribution among all CVEs352,101 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local144 (15.5%)
Network582 (62.6%)
Unknown0 (0.0%)
Physical11 (1.2%)
Adjacent Network192 (20.7%)
Attack Complexity
Low837 (90.1%)
High92 (9.9%)
Unknown0 (0.0%)
User Interaction
None845 (91.0%)
Unknown0 (0.0%)
Required84 (9.0%)
Privileges Required
Low201 (21.6%)
High23 (2.5%)
None705 (75.9%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (929 CVEs).
CISA KEV
7 CVEs
0.8% of CVEs· 87th percentile
Metasploit
1 CVE
0.1% of CVEs· 78th percentile
Nuclei
3 CVEs
0.3% of CVEs· 73rd percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Juniper Networks, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Juniper Networks, Inc. as a CNA — matched by CVE ID, not by organization name.