CVE-2026-33779

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

EUVD-2021-18294

Malware in sbrugna...

EUVD-2019-0854

Malware in sbrugna...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which arises from a data...

J-Web SRX Execute Arbitrary Code

The vulnerability of the emmitdebugnote method in the webauthoperation.php file of the J-Web interface on Juniper Networks Junos OS devices in the SRX and EX series is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to...

J-Web Interface Code Execution

The vulnerability of the J-Web interface on Juniper Networks Junos OS operating systems on SRX and EX devices is related to the ability to write beyond the buffer boundaries into memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Juniper Networks J-Web Code Execution

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Juniper Networks SRX/EX J-Web Data Compromise

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX and EX devices is related to a modification of the PHP external variable. Exploiting this vulnerability allows an attacker to compromise data integrity from a remote location...

Juniper Networks SRX J-Web Code Execution

The vulnerability of the J-Web interface in Juniper Networks Junos OS-based SRX devices involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

J-Web Interface File Disclosure

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to incorrect authentication. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

J-Web Junos Unauthorized Access

The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system is related to insufficient neutralization of certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the protected system through a...

J-Web Upload Arbitrary Files

The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system relates to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...

J-Web XSS

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2022-22181

A reflected Cross-site Scripting XSS vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web. This may allow the attacker to gain control of...

CVE-2022-22181

A reflected Cross-site Scripting XSS vulnerability in J-Web of Juniper Networks Junos OS allows a network-based authenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web. This may allow the attacker to gain control of...

J-Web Interface Bypass

The vulnerability of the J-Web interface in Junos OS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

CVE-2021-31373

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

Cross site scripting

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

CVE-2021-31373: Improper Input Validation

A persistent Cross-Site Scripting XSS vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web...

PT-2021-19271

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S8 Juniper Networks Junos OS on SRX Series versions 18.3 through 18.3R3-S5 Juniper Networks Junos OS on SRX Series versions 18.4 through 18.4R3-S8 Juniper Networks Junos OS o...