Ex4300mp
Vendor:
First CVE: Mar 31, 2015 · Active for 11 years
18
Total CVEs
Bottom 1%
1.8
Avg CVEs / Year
Bottom 1%
6.7
Avg CVSS
Higher Avg CVSS than 50% of tracked products
16.7%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ex4300mp over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2015
11 years ago
Most Recent CVE
Jul 9, 2026
15 days ago
CVE Severity & Scoring
Ex4300mp18 CVEs
61%
33%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (11.1%)
Network9 (50.0%)
Unknown1 (5.6%)
Physical0 (0.0%)
Adjacent Network6 (33.3%)
Attack Complexity
Low15 (83.3%)
High2 (11.1%)
Unknown1 (5.6%)
User Interaction
None16 (88.9%)
Unknown1 (5.6%)
Required1 (5.6%)
Privileges Required
Low2 (11.1%)
High0 (0.0%)
None15 (83.3%)
Unknown1 (5.6%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36844MEDIUM A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, importan | Aug 17, 2023 | 5.3 | 95 | YES | YES |
CVE-2023-36847MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 91 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2021-0211CRITICAL An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid B | Jan 15, 2021 | 10.0 | 31 | NO | NO |
CVE-2026-33802MEDIUM A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS).
On EX2300, | Jul 9, 2026 | 5.5 | 27 | NO | NO |
CVE-2019-0041HIGH On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail to forward such traf | Apr 10, 2019 | 8.6 | 27 | NO | NO |
CVE-2024-21619HIGH A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks | Jan 25, 2024 | 7.5 | 25 | NO | NO |
CVE-2018-15504HIGH An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL poin | Aug 18, 2018 | 7.5 | 25 | NO | NO |
CVE-2022-22221HIGH An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS on SRX Series and EX Series allows a locally authenticated attacke | Jul 20, 2022 | 7.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
3 CVEs
16.7% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
5.6% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Ex4300mp
Top CWEs
Versions
No cataloged versions.