Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Juniper: actively exploited vulnerabilities

8 vulnerabilities in Juniper products (Junos OS, ScreenOS (NetScreen)) are in CISA’s catalog of exploited vulnerabilities. Last added: October 2, 2025.

Juniper security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Juniper category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Junos OS 7 vulnerabilities · Switches and routers
  • ScreenOS (NetScreen) 1 vulnerability · Firewalls and VPNs

Name used by CISA: Juniper. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Juniper list.

  1. Rank 1Juniper ScreenOS (NetScreen)

    CVE-2015-7755

    CVE from 2015, added in 2025

    Juniper ScreenOS Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 2, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Juniper Junos OS

    CVE-2023-36845

    Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    4 days
    CVSS severity
    9.8 (critical)

  3. Rank 3Juniper Junos OS

    CVE-2020-1631

    CVE from 2020, added in 2022

    Juniper Junos OS Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Juniper Junos OS

    CVE-2023-36844

    Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    4 days
    CVSS severity
    5.3 (medium)

  5. Rank 5Juniper Junos OS

    CVE-2023-36846

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    4 days
    CVSS severity
    5.3 (medium)

  6. Rank 6Juniper Junos OS

    CVE-2023-36847

    Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    4 days
    CVSS severity
    5.3 (medium)

  7. Rank 7Juniper Junos OS

    CVE-2023-36851

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 13, 2023
    CISA deadline
    4 days
    CVSS severity
    5.3 (medium)

  8. Rank 8Juniper Junos OS

    CVE-2025-21590

    Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 13, 2025
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

Follow and verify

Get new Juniper vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.