ZeusQA
Start free

Known exploited vulnerabilities

Juniper vulnerabilities attackers have used

Every Juniper vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 8 Juniper vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2015-7755, added Oct 2, 2025. Junos OS has the most entries (7).

In KEV, all time
8
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

Junos OS (7), ScreenOS (1).

Every Juniper entry in CISA KEV

  1. CVE-2015-7755

    Added · due

    Juniper ScreenOS Improper Authentication Vulnerability

    Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.

  2. CVE-2025-21590

    Added · due

    Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

    Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

  3. CVE-2023-36851

    Added · due

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to…

  4. CVE-2023-36847

    Added · due

    Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

    Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to…

  5. CVE-2023-36846

    Added · due

    Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to…

  6. CVE-2023-36845

    Added · due

    Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

    Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which…

  7. CVE-2023-36844

    Added · due

    Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

    Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is…

  8. CVE-2020-1631

    Added · due

    Juniper Junos OS Path Traversal Vulnerability

    A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works