Ex2300
Vendor:
First CVE: Mar 31, 2015 · Active for 11 years
59
Total CVEs
More Total CVEs than 98% of tracked products
5.9
Avg CVEs / Year
Higher CVE frequency than 90% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 42% of tracked products
5.1%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Ex2300 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2015
11 years ago
Most Recent CVE
Jul 9, 2026
15 days ago
CVE Severity & Scoring
Ex230059 CVEs
46%
49%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local8 (13.6%)
Network37 (62.7%)
Unknown1 (1.7%)
Physical2 (3.4%)
Adjacent Network11 (18.6%)
Attack Complexity
Low51 (86.4%)
High7 (11.9%)
Unknown1 (1.7%)
User Interaction
None52 (88.1%)
Unknown1 (1.7%)
Required6 (10.2%)
Privileges Required
Low9 (15.3%)
High1 (1.7%)
None48 (81.4%)
Unknown1 (1.7%)
Top CVEs
Signals from CVEs in this product scope (59 CVEs).
59 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36844MEDIUM A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, importan | Aug 17, 2023 | 5.3 | 95 | YES | YES |
CVE-2023-36847MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 91 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2019-0006CRITICAL A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devi | Jan 15, 2019 | 9.8 | 33 | NO | NO |
CVE-2019-0002CRITICAL On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, | Jan 15, 2019 | 9.8 | 32 | NO | NO |
CVE-2021-0211CRITICAL An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid B | Jan 15, 2021 | 10.0 | 31 | NO | NO |
CVE-2021-0275HIGH A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. Th | Apr 22, 2021 | 8.8 | 28 | NO | NO |
CVE-2019-0062HIGH A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentiall | Oct 9, 2019 | 8.8 | 28 | NO | NO |
CVE-2018-0052HIGH If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by | Oct 10, 2018 | 8.1 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (59 CVEs).
CISA KEV
3 CVEs
5.1% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
1.7% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (59 CVEs).
Media Mentions
Signals from CVEs in this product scope (59 CVEs).
Top CNAs Publishing CVEs For Ex2300
Top CWEs
Versions
No cataloged versions.