# Juniper vulnerabilities

> Juniper has 893 published vulnerabilities across 443 products in our catalogue. 8 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Junos, with 646. If you run Juniper software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/juniper

## At a glance

- **Published vulnerabilities:** 893
- **Known to be exploited:** 8
- **Products:** 443
- **Versions:** 998
- **Most recently added to the known-exploited list:** [CVE-2015-7755](https://www.precursorintelligence.com/what-is/cve-2015-7755), 2 October 2025. We keep watching the list.

## Which Juniper products have the most vulnerabilities?

- [Junos](https://www.precursorintelligence.com/product/juniper/junos): 646 published vulnerabilities, 209 versions
- [Junos OS Evolved](https://www.precursorintelligence.com/product/juniper/junos_os_evolved): 157 published vulnerabilities, 25 versions
- [Srx5600](https://www.precursorintelligence.com/product/juniper/srx5600): 119 published vulnerabilities, 0 versions
- [Srx5800](https://www.precursorintelligence.com/product/juniper/srx5800): 119 published vulnerabilities, 0 versions
- [Srx550](https://www.precursorintelligence.com/product/juniper/srx550): 109 published vulnerabilities, 0 versions
- [Srx5400](https://www.precursorintelligence.com/product/juniper/srx5400): 105 published vulnerabilities, 0 versions
- [Srx1500](https://www.precursorintelligence.com/product/juniper/srx1500): 97 published vulnerabilities, 0 versions
- [Srx3400](https://www.precursorintelligence.com/product/juniper/srx3400): 94 published vulnerabilities, 0 versions
- [Srx1400](https://www.precursorintelligence.com/product/juniper/srx1400): 94 published vulnerabilities, 0 versions
- [Srx110](https://www.precursorintelligence.com/product/juniper/srx110): 94 published vulnerabilities, 0 versions

Each product page lists its own known-exploited flaws.

## Which Juniper vulnerabilities are being exploited?

8 flaws are on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2015-7755](https://www.precursorintelligence.com/what-is/cve-2015-7755): Juniper ScreenOS Improper Authentication Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 61%, known exploited since 2 October 2025.
- [CVE-2025-21590](https://www.precursorintelligence.com/what-is/cve-2025-21590): Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability. Medium, CVSS 4.4, chance of use in 30 days 1.7%, known exploited since 13 March 2025.
- [CVE-2023-36845](https://www.precursorintelligence.com/what-is/cve-2023-36845): Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 13 November 2023.
- [CVE-2023-36844](https://www.precursorintelligence.com/what-is/cve-2023-36844): Juniper Junos OS EX Series PHP External Variable Modification Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 90%, known exploited since 13 November 2023.
- [CVE-2023-36846](https://www.precursorintelligence.com/what-is/cve-2023-36846): Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 93%, known exploited since 13 November 2023.
- [CVE-2023-36847](https://www.precursorintelligence.com/what-is/cve-2023-36847): Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 83%, known exploited since 13 November 2023.
- [CVE-2023-36851](https://www.precursorintelligence.com/what-is/cve-2023-36851): Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability. Medium, CVSS 5.3, chance of use in 30 days 1.1%, known exploited since 13 November 2023.
- [CVE-2020-1631](https://www.precursorintelligence.com/what-is/cve-2020-1631): Juniper Junos OS Path Traversal Vulnerability. High, CVSS 8.8, chance of use in 30 days 4.8%, known exploited since 25 March 2022.

## Which Juniper flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2022-42889](https://www.precursorintelligence.com/what-is/cve-2022-42889): >99%, Critical (CVSS 9.8)
- [CVE-2023-36845](https://www.precursorintelligence.com/what-is/cve-2023-36845): 95%, Critical (CVSS 9.8), known exploited
- [CVE-2023-36846](https://www.precursorintelligence.com/what-is/cve-2023-36846): 93%, Medium (CVSS 5.3), known exploited
- [CVE-2023-36844](https://www.precursorintelligence.com/what-is/cve-2023-36844): 90%, Medium (CVSS 5.3), known exploited
- [CVE-2019-11358](https://www.precursorintelligence.com/what-is/cve-2019-11358): 87%, Medium (CVSS 6.1)
- [CVE-2023-36847](https://www.precursorintelligence.com/what-is/cve-2023-36847): 83%, Medium (CVSS 5.3), known exploited
- [CVE-2009-1185](https://www.precursorintelligence.com/what-is/cve-2009-1185): 81%, High (CVSS 7.2)
- [CVE-2004-0230](https://www.precursorintelligence.com/what-is/cve-2004-0230): 80%, Medium (CVSS 5.0)
- [CVE-2020-10188](https://www.precursorintelligence.com/what-is/cve-2020-10188): 74%, Critical (CVSS 9.8)

## All Juniper products we track

79 products with at least one tracked version, most vulnerabilities first:

- [Junos](https://www.precursorintelligence.com/product/juniper/junos): 646 vulnerabilities, 209 versions
- [Junos OS Evolved](https://www.precursorintelligence.com/product/juniper/junos_os_evolved): 157 vulnerabilities, 25 versions
- [Junos Space](https://www.precursorintelligence.com/product/juniper/junos_space): 50 vulnerabilities, 41 versions
- [Northstar Controller](https://www.precursorintelligence.com/product/juniper/northstar_controller): 19 vulnerabilities, 1 version
- [Screenos](https://www.precursorintelligence.com/product/juniper/screenos): 16 vulnerabilities, 38 versions
- [Advanced Threat Prevention](https://www.precursorintelligence.com/product/juniper/advanced_threat_prevention): 11 vulnerabilities, 5 versions
- [Netscreen Screenos](https://www.precursorintelligence.com/product/juniper/netscreen_screenos): 9 vulnerabilities, 203 versions
- [Contrail Service Orchestration](https://www.precursorintelligence.com/product/juniper/contrail_service_orchestration): 7 vulnerabilities, 25 versions
- [Ive OS](https://www.precursorintelligence.com/product/juniper/ive_os): 6 vulnerabilities, 8 versions
- [Junos Pulse Secure Access Service](https://www.precursorintelligence.com/product/juniper/junos_pulse_secure_access_service): 5 vulnerabilities, 29 versions
- [Libslax](https://www.precursorintelligence.com/product/juniper/libslax): 5 vulnerabilities, 32 versions
- [Session and Resource Control](https://www.precursorintelligence.com/product/juniper/session_and_resource_control): 4 vulnerabilities, 12 versions
- [Paragon Active Assurance Control Center](https://www.precursorintelligence.com/product/juniper/paragon_active_assurance_control_center): 4 vulnerabilities, 14 versions
- [Secure Access 2000](https://www.precursorintelligence.com/product/juniper/secure_access_2000): 4 vulnerabilities, 1 version
- [Ctpview](https://www.precursorintelligence.com/product/juniper/ctpview): 3 vulnerabilities, 6 versions
- [Junose](https://www.precursorintelligence.com/product/juniper/junose): 3 vulnerabilities, 77 versions
- [Junos Pulse Access Control Service](https://www.precursorintelligence.com/product/juniper/junos_pulse_access_control_service): 3 vulnerabilities, 11 versions
- [Mist Cloud UI](https://www.precursorintelligence.com/product/juniper/mist_cloud_ui): 3 vulnerabilities, 1 version
- [Pulse Connect Secure](https://www.precursorintelligence.com/product/juniper/pulse_connect_secure): 3 vulnerabilities, 5 versions
- [Netscreen-Idp 100](https://www.precursorintelligence.com/product/juniper/netscreen-idp_100): 2 vulnerabilities, 1 version
- [Secure Access](https://www.precursorintelligence.com/product/juniper/secure_access): 2 vulnerabilities, 1 version
- [Netscreen-Idp](https://www.precursorintelligence.com/product/juniper/netscreen-idp): 2 vulnerabilities, 3 versions
- [Netscreen-Idp 10](https://www.precursorintelligence.com/product/juniper/netscreen-idp_10): 2 vulnerabilities, 1 version
- [Smartpass](https://www.precursorintelligence.com/product/juniper/smartpass): 2 vulnerabilities, 6 versions
- [Netscreen-Idp 1000](https://www.precursorintelligence.com/product/juniper/netscreen-idp_1000): 2 vulnerabilities, 1 version
- [Dx](https://www.precursorintelligence.com/product/juniper/dx): 2 vulnerabilities, 1 version
- [Netscreen-Idp 500](https://www.precursorintelligence.com/product/juniper/netscreen-idp_500): 2 vulnerabilities, 1 version
- [Contrail](https://www.precursorintelligence.com/product/juniper/contrail): 2 vulnerabilities, 4 versions
- [Appformix](https://www.precursorintelligence.com/product/juniper/appformix): 2 vulnerabilities, 27 versions
- [Junos E](https://www.precursorintelligence.com/product/juniper/junos_e): 2 vulnerabilities, 5 versions
- [Identity Management Service](https://www.precursorintelligence.com/product/juniper/identity_management_service): 2 vulnerabilities, 11 versions
- [Netscreen-5gt](https://www.precursorintelligence.com/product/juniper/netscreen-5gt): 2 vulnerabilities, 1 version
- [Contrail Networking](https://www.precursorintelligence.com/product/juniper/contrail_networking): 1 vulnerability, 1 version
- [Contrail Cloud](https://www.precursorintelligence.com/product/juniper/contrail_cloud): 1 vulnerability, 11 versions
- [Netscreen Remote Security Client](https://www.precursorintelligence.com/product/juniper/netscreen_remote_security_client): 1 vulnerability, 1 version
- [Netscreen Remote VPN Client](https://www.precursorintelligence.com/product/juniper/netscreen_remote_vpn_client): 1 vulnerability, 1 version
- [Appid Service Sigpack](https://www.precursorintelligence.com/product/juniper/appid_service_sigpack): 1 vulnerability, 1 version
- [Trusted Platform Module Firmware](https://www.precursorintelligence.com/product/juniper/trusted_platform_module_firmware): 1 vulnerability, 1 version
- [Advanced Threat Prevention Firmware](https://www.precursorintelligence.com/product/juniper/advanced_threat_prevention_firmware): 1 vulnerability, 9 versions
- [Junos T](https://www.precursorintelligence.com/product/juniper/junos_t): 1 vulnerability, 1 version
- [Junos Pulse Client](https://www.precursorintelligence.com/product/juniper/junos_pulse_client): 1 vulnerability, 1 version
- [Junos M](https://www.precursorintelligence.com/product/juniper/junos_m): 1 vulnerability, 1 version
- [Junos J](https://www.precursorintelligence.com/product/juniper/junos_j): 1 vulnerability, 1 version
- [Mobile System Software](https://www.precursorintelligence.com/product/juniper/mobile_system_software): 1 vulnerability, 6 versions
- [Idp](https://www.precursorintelligence.com/product/juniper/idp): 1 vulnerability, 4 versions
- [Junose T](https://www.precursorintelligence.com/product/juniper/junose_t): 1 vulnerability, 1 version
- [Junose M](https://www.precursorintelligence.com/product/juniper/junose_m): 1 vulnerability, 1 version
- [Junose J](https://www.precursorintelligence.com/product/juniper/junose_j): 1 vulnerability, 1 version
- [Junose E](https://www.precursorintelligence.com/product/juniper/junose_e): 1 vulnerability, 1 version
- [Networks Mobility System Software](https://www.precursorintelligence.com/product/juniper/networks_mobility_system_software): 1 vulnerability, 6 versions
- [Network and Security Manager Software](https://www.precursorintelligence.com/product/juniper/network_and_security_manager_software): 1 vulnerability, 1 version
- [Juniper Installer Service Client](https://www.precursorintelligence.com/product/juniper/juniper_installer_service_client): 1 vulnerability, 4 versions
- [Jsnapy](https://www.precursorintelligence.com/product/juniper/jsnapy): 1 vulnerability, 18 versions
- [Ringmaster](https://www.precursorintelligence.com/product/juniper/ringmaster): 1 vulnerability, 6 versions
- [Sbr Carrier](https://www.precursorintelligence.com/product/juniper/sbr_carrier): 1 vulnerability, 9 versions
- [Steel-Belted Radius Carrier](https://www.precursorintelligence.com/product/juniper/steel-belted_radius_carrier): 1 vulnerability, 3 versions
- [Unified Access Control Software](https://www.precursorintelligence.com/product/juniper/unified_access_control_software): 1 vulnerability, 2 versions
- [Odyssey Access Client](https://www.precursorintelligence.com/product/juniper/odyssey_access_client): 1 vulnerability, 1 version
- [Paragon Active Assurance](https://www.precursorintelligence.com/product/juniper/paragon_active_assurance): 1 vulnerability, 1 version
- [Security Threat Response Manager](https://www.precursorintelligence.com/product/juniper/security_threat_response_manager): 1 vulnerability, 1 version
- [Service Insight](https://www.precursorintelligence.com/product/juniper/service_insight): 1 vulnerability, 6 versions
- [Service Now](https://www.precursorintelligence.com/product/juniper/service_now): 1 vulnerability, 6 versions
- [Src Pe](https://www.precursorintelligence.com/product/juniper/src_pe): 1 vulnerability, 2 versions
- [Jdpi-Decoder Engine](https://www.precursorintelligence.com/product/juniper/jdpi-decoder_engine): 1 vulnerability, 1 version
- [Jatp](https://www.precursorintelligence.com/product/juniper/jatp): 1 vulnerability, 2 versions
- [Network Connect](https://www.precursorintelligence.com/product/juniper/network_connect): 0 vulnerabilities, 7 versions
- [Paragon Automation](https://www.precursorintelligence.com/product/juniper/paragon_automation): 0 vulnerabilities, 8 versions
- [Junos Internet Software](https://www.precursorintelligence.com/product/juniper/junos_internet_software): 0 vulnerabilities, 2 versions
- [Junos Evolved](https://www.precursorintelligence.com/product/juniper/junos_evolved): 0 vulnerabilities, 8 versions
- [Installer Service](https://www.precursorintelligence.com/product/juniper/installer_service): 0 vulnerabilities, 6 versions
- [Host Checker](https://www.precursorintelligence.com/product/juniper/host_checker): 0 vulnerabilities, 1 version
- [Virtual Advanced Threat Prevention](https://www.precursorintelligence.com/product/juniper/virtual_advanced_threat_prevention): 0 vulnerabilities, 7 versions
- [Secure Application Manager](https://www.precursorintelligence.com/product/juniper/secure_application_manager): 0 vulnerabilities, 1 version
- [Security Director](https://www.precursorintelligence.com/product/juniper/security_director): 0 vulnerabilities, 2 versions
- [Security Director Policy Enforcer](https://www.precursorintelligence.com/product/juniper/security_director_policy_enforcer): 0 vulnerabilities, 13 versions
- [Setup Client Activex Control](https://www.precursorintelligence.com/product/juniper/setup_client_activex_control): 0 vulnerabilities, 3 versions
- [Space Security Director](https://www.precursorintelligence.com/product/juniper/space_security_director): 0 vulnerabilities, 19 versions
- [Connect Tools](https://www.precursorintelligence.com/product/juniper/connect_tools): 0 vulnerabilities, 1 version
- [VPN](https://www.precursorintelligence.com/product/juniper/vpn): 0 vulnerabilities, 2 versions

## Questions

### How many vulnerabilities does Juniper have?

Our catalogue lists 893 published vulnerabilities across 443 products and 998 versions from Juniper. The most recent Juniper flaw added to the known-exploited list is CVE-2015-7755, on 2 October 2025.

### Which Juniper vulnerabilities are being exploited?

8 Juniper vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2015-7755, CVE-2025-21590 and CVE-2023-36845. The full list is on this page.

### Which Juniper product has the most vulnerabilities?

Junos, with 646 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Juniper vulnerabilities?

Create a Precursor Intelligence account and track the Juniper products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Juniper?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

