Srx5800
Vendor:
First CVE: Jul 11, 2013 · Active for 13 years
153
Total CVEs
More Total CVEs than 99% of tracked products
10.9
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 43% of tracked products
2.0%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Srx5800 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 11, 2013
13 years ago
Most Recent CVE
Jul 9, 2026
15 days ago
CVE Severity & Scoring
Srx5800153 CVEs
32%
64%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local10 (6.5%)
Network120 (78.4%)
Unknown16 (10.5%)
Physical1 (0.7%)
Adjacent Network6 (3.9%)
Attack Complexity
Low120 (78.4%)
High17 (11.1%)
Unknown16 (10.5%)
User Interaction
None130 (85.0%)
Unknown16 (10.5%)
Required7 (4.6%)
Privileges Required
Low14 (9.2%)
High3 (2.0%)
None120 (78.4%)
Unknown16 (10.5%)
Top CVEs
Signals from CVEs in this product scope (153 CVEs).
153 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-36845CRITICAL A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series
and SRX Series
allows an unauthenticated, network-based attacker to remote | Aug 17, 2023 | 9.8 | 98 | YES | YES |
CVE-2023-36846MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Aug 17, 2023 | 5.3 | 93 | YES | NO |
CVE-2023-36851MEDIUM A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to | Sep 27, 2023 | 5.3 | 57 | YES | NO |
CVE-2016-1286HIGH named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature r | Mar 9, 2016 | 8.6 | 56 | NO | NO |
CVE-2016-1285MEDIUM named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a | Mar 9, 2016 | 6.8 | 56 | NO | NO |
CVE-2014-9708MEDIUM Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demons | Mar 31, 2015 | 5.0 | 42 | NO | NO |
CVE-2017-3145HIGH BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and cr | Jan 16, 2019 | 7.5 | 38 | NO | NO |
CVE-2026-57026HIGH An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticate | Jul 9, 2026 | 7.5 | 35 | NO | NO |
CVE-2026-57023HIGH An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenti | Jul 9, 2026 | 7.5 | 34 | NO | NO |
CVE-2013-4685HIGH Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled | Jul 11, 2013 | 10.0 | 33 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (153 CVEs).
CISA KEV
3 CVEs
2.0% of CVEs· 96th percentile
Metasploit
1 CVE
0.7% of CVEs· 96th percentile
Nuclei
1 CVE
0.7% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (153 CVEs).
Media Mentions
Signals from CVEs in this product scope (153 CVEs).
Top CNAs Publishing CVEs For Srx5800
Top CWEs
Versions
No cataloged versions.