Juniper vulnerabilities8 known to be exploited.
Juniper has 893 published vulnerabilities across 443 products in our catalogue. 8 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Junos, with 646. If you run Juniper software, patch the exploited flaws first.
The most recent Juniper flaw added to the known-exploited list is CVE-2015-7755, on 2 October 2025. We keep watching the known-exploited list.
Which Juniper vulnerabilities are being exploited?
8 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Juniper ScreenOS Improper Authentication Vulnerability
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
- 4.4Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability.
- 9.8Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable.
- 5.3Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables.
- 5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
- 5.3Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
- 5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
- 8.8Juniper Junos OS Path Traversal Vulnerability
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an...
Which Juniper flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%CVE-2022-42889Critical
Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded.
- 95%
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code.
- 93%
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
- 90%
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.
- 87%CVE-2019-11358Medium
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
- 83%
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.
- 81%CVE-2009-1185High
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.
- 80%CVE-2004-0230Medium
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST...
- 74%CVE-2020-10188Critical
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
All Juniper products we track.
79 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Junosjunos646 vulnerabilities209 versions
- Junos OS Evolvedjunos_os_evolved157 vulnerabilities25 versions
- Junos Spacejunos_space50 vulnerabilities41 versions
- Northstar Controllernorthstar_controller19 vulnerabilities1 version
- Screenosscreenos16 vulnerabilities38 versions
- Advanced Threat Preventionadvanced_threat_prevention11 vulnerabilities5 versions
- Netscreen Screenosnetscreen_screenos9 vulnerabilities203 versions
- Contrail Service Orchestrationcontrail_service_orchestration7 vulnerabilities25 versions
- Ive OSive_os6 vulnerabilities8 versions
- Junos Pulse Secure Access Servicejunos_pulse_secure_access_service5 vulnerabilities29 versions
- Libslaxlibslax5 vulnerabilities32 versions
- Paragon Active Assurance Control Centerparagon_active_assurance_control_center4 vulnerabilities14 versions
- Secure Access 2000secure_access_20004 vulnerabilities1 version
- Session and Resource Controlsession_and_resource_control4 vulnerabilities12 versions
- Ctpviewctpview3 vulnerabilities6 versions
- Junos Pulse Access Control Servicejunos_pulse_access_control_service3 vulnerabilities11 versions
- Junosejunose3 vulnerabilities77 versions
- Mist Cloud UImist_cloud_ui3 vulnerabilities1 version
- Pulse Connect Securepulse_connect_secure3 vulnerabilities5 versions
- Appformixappformix2 vulnerabilities27 versions
- Contrailcontrail2 vulnerabilities4 versions
- Dxdx2 vulnerabilities1 version
- Identity Management Serviceidentity_management_service2 vulnerabilities11 versions
- Junos Ejunos_e2 vulnerabilities5 versions
This directory lists the 79 Juniper products with at least one tracked version, of 443 in our catalogue.
Running Juniper? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.
- Matched to
- Screenos on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 893 published vulnerabilities across 443 products and 998 versions from Juniper. The most recent Juniper flaw added to the known-exploited list is CVE-2015-7755, on 2 October 2025.
8 Juniper vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2015-7755, CVE-2025-21590 and CVE-2023-36845. The full list is on this page.
Junos, with 646 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Juniper products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.