# CASCA evidence receipt — CVE-2023-36846

- Generation: `gen-409cbd0c74ff4feb70e4944e6b98ce40`
- As known: 2026-07-21T08:13:17.697275+00:00
- Comparison: gen-56ccdaf914f7b4be95b689ccae7dc20d
- Score policy: public-priority-v1.0.1
- Conflict: not observed in this generation

## Source assertions

- **CISA-ADP** (independent_enrichment): container — CISA ADP Vulnrichment
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36846
- **CVE** (derivative_copy): container — CVE Program Container
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36846
- **juniper** (original_assertion): container — Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
  - Observed: 2026-07-19T04:27:06.398189+00:00
  - Citation: https://www.cve.org/CVERecord?id=CVE-2023-36846
- **CISA KEV** (original_assertion): observed_exploitation — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
  - Observed: 2026-07-19T04:54:04.25158+00:00
  - Citation: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- **FIRST EPSS** (original_assertion): model_probability — Probability 0.942050000000; percentile 0.998380000000
  - Observed: 2026-07-19T04:54:35.756809+00:00
  - Citation: https://www.first.org/epss/data_stats.html

## CVSS assessments

- **nvd@nist.gov** (Primary, CVSS 3.1): 5.3 — score eligible
  - Evidence class: nvd_enrichment_exact; source rank: 0
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`
- **sirt@juniper.net** (Secondary, CVSS 3.1): 5.3 — score eligible
  - Evidence class: exact_record_cna; source rank: 1
  - Validation: valid_match
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`
- **juniper** (unknown, CVSS 3.1): 5.3 — display only
  - Evidence class: direct_cve_record_display_only; source rank: not applicable
  - Validation: display-only direct record assessment
  - Vector: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

## Applicability scope

- **Juniper Networks · Junos OS** (direct_source; unknown)
  - Versions: [{"status": "affected", "version": "0", "lessThan": "20.4R3-S8", "versionType": "semver"}, {"status": "affected", "version": "21.1", "lessThan": "21.1*", "versionType": "semver"}, {"status": "affected", "version": "21.2", "lessThan": "21.2R3-S6", "versionType": "semver"}, {"status": "affected", "version": "21.3", "lessThan": "21.3R3-S5", "versionType": "semver"}, {"status": "affected", "version": "21.4", "lessThan": "21.4R3-S5", "versionType": "semver"}, {"status": "affected", "version": "22.1", "lessThan": "22.1R3-S3", "versionType": "semver"}, {"status": "affected", "version": "22.2", "lessThan": "22.2R3-S2", "versionType": "semver"}, {"status": "affected", "version": "22.3", "lessThan": "22.3R2-S2, 22.3R3", "versionType": "semver"}, {"status": "affected", "version": "22.4", "lessThan": "22.4R2-S1, 22.4R3", "versionType": "semver"}]
- **juniper · junos** (vulnerable_target; supported)
  - Versions: Any version (unconstrained) (< 20.4); Version 20.4; Version 21.1; Version 21.2; Version 21.3; Version 21.4; Version 22.1; Version 22.2; Version 22.3; Version 22.4
  - Canonical identity: `product-7cd283e8e07c377a714f066def688e2c997bf1391107ad32edecea8a128ac327`
  - Official link states: linked_exact
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*`
  - Criterion (linked_exact, vulnerable_target): `cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*`
- **juniper · srx100** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-a898f63ff685a1e5584bb37ada6a97bacd2f06c517ab41310f92b8ea4f03e4b0`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*`
- **juniper · srx110** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-0956a41596a78e1c7fdcdc55ba9a2b1e2d0b9b907c07556b9413630f55fbe991`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*`
- **juniper · srx1400** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-d2cc3964d4d38df127e0689c650e843c603cd3d5fab55d89bb87ab5b966d9c8c`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*`
- **juniper · srx1500** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-39480d6ca0a91cfc89b65e7db63d739d35e671a501f11ca16ba836f5df6b042a`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*`
- **juniper · srx210** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6f05505416e95e405a16b048a8cf9530bdcd167e4a87190b5aefc595eb2512fd`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*`
- **juniper · srx220** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ac33e6857eb2de48dd4bf199a18d5c2bb84a0f015b06ecae1c41aa4f21db6e36`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*`
- **juniper · srx240** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-f3b4fe7c0b9f79799ad1a261cd1330f3716a1a717793297176ce2023cafce930`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*`
- **juniper · srx240h2** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-4bc360c42586f41e90ae2f476437afc490f4cea8ee9ce8fee0fb842af1f4d63b`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*`
- **juniper · srx240m** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-da436f147780f0fb591c8e5059354909b4b6a934b3c2eb1164eb1dbf0d48f4f8`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*`
- **juniper · srx300** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-7bd3ce9588192f8723011bbb1b65b46c334c0a9f033018751f4e1f3175c0a08e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*`
- **juniper · srx320** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-73dc63c528f4c8085f1e793a16c4776a39e9a0a451982d7e17df8d482cbeb5fb`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*`
- **juniper · srx340** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-50cf8dfa31e808c01a8bb4fe6202c516237938eceeb09d4fcfea26a8cdbdb8ca`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*`
- **juniper · srx3400** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-ee89ce1408dc5af617ea071dcf7c6ee0c1853a00035b2ab3b1ae527f19c6da23`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*`
- **juniper · srx345** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-2b6a51b526da46a13adfbe81a96574d779fcc489de7f5d320e321e75ee9083bc`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*`
- **juniper · srx3600** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-78a45468910faf6442948a42f527b30268d4626a0788102e6aa7f06378ac07fd`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*`
- **juniper · srx380** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1d268e18c692bf272999161f9b3efcf3d82e1134d9fa1268d887e9fe0cdf44da`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*`
- **juniper · srx4000** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-1a4362faa7226de711cd2a2cd1eda102b3ea39c98de5baa426c7f7a6fae19a63`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*`
- **juniper · srx4100** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-bc2b1739205e37e931f5090b2d5ef6246ce121efddf302069aaf44ac10dbb157`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*`
- **juniper · srx4200** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-6cc07b3a8be810ae3f75ba52b57dcd81571ec2947353140f41efe9fa898668de`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*`
- **juniper · srx4600** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-9000e06e2c62cd29489e9c37c1a460ee0ce106ce29796b2ecd5aee4e87c6fca6`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*`
- **juniper · srx5000** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-e760169326215a776d9c7a2c5f54b8d27f6e1a1d1168aa28168c06580fd93047`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*`
- **juniper · srx5400** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-a7fa7f505d02b202c7f0ca0bc8ccaceb9b755144fa414352ae464854d6aad605`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*`
- **juniper · srx550** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-8d6e6b595aaf875be097cc39722f0a76e431823f6a05d63f7488afb8ac0e7363`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*`
- **juniper · srx550_hm** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-35b4724620f1ac293311007694dabdd9a4dcf066f43f5a431cda1d6c5cef3480`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*`
- **juniper · srx550m** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-955bdf6458caf6e017a7722ca63a37bef356167df219a8cf3f7810d1730f9eda`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*`
- **juniper · srx5600** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-690f81ced501cf27fef4d0cb4d370865d756b409729de4511cac31449df8057e`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*`
- **juniper · srx5800** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-3a026af074bff34e8ee35316a19b5a25295483a6b316d7c8978b6952baa4b121`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*`
- **juniper · srx650** (environmental_constraint; constrained)
  - Versions: Version not applicable
  - Canonical identity: `product-3507e5b3630d3cbeb5ae34fd156432008dd51199381fb51181baadf50dede635`
  - Official link states: linked_exact
  - Criterion (linked_exact, environmental_constraint): `cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*`

## Identity source boundaries

- **cpe_dictionary**: 1775266 records through 2026-07-21T06:45:29.809553+00:00
  - Run: `27d65b0f-b718-4b4f-bb79-c47c68d09dfa`
- **cpe_match**: 643502 records through 2026-07-21T08:13:17.697275+00:00
  - Run: `955dae73-7302-438b-aee1-058d7cc5d48e`

## Limitations and unknowns

- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D remains unknown because WC-03 has not converted canonical CPE mappings into generation-bound mapping obligations; canonical identity alone does not score applicability.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.

Generated from CASCA normalized evidence. This receipt is not proof that an asset is affected, unaffected, safe, or fixed.