CISA KEV · catalog date Nov 13, 2023 · first observed Jul 19, 2026
Evidence dossier
CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Exploited in the wild (CISA KEV since Nov 13, 2023). juniper reports CVSS 3.1 9.8. EPSS estimates 93.7% exploit likelihood as of Aug 18, 2026.
As of Aug 27, 2026
Normalized restatement
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code. This issue affects Juniper Networks Junos OS on EX Series and SRX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.
- State
- PUBLISHED
- Published
- Aug 17, 2023
- Updated
- Oct 21, 2025
- Evidence coverage
- 99%
Evidence chronology
What was known when
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCACVE ProgramOriginal evidence ↗
Record text: CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
- Source dateSource date omittedFirst observed by CASCAjuniperOriginal evidence ↗
Record text: Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Inspect raw assertion
- Field
container- Value
- Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 93.67% probability · 99.83th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.936670000000; percentile 0.998330000000
FIRST EPSS · score date Aug 18, 2026 · 99.8th percentile · first observed Aug 18, 2026
juniper · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot
Evidence detail
Source limits and decisions
Why each evidence state has this value
Outside this view’s verified evidenceReason detail begins outside this selected snapshot; the state remains source-bound.
Source comparison
Who said what
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Inspect raw assertion
- Field
container- Value
- Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
93.67% probability · 99.83th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.936670000000; percentile 0.998330000000
Applicability
Cited product scope
Grouped from 2 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
30 scope groups
Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "0", "lessThan": "20.4R3-S9", "versionType": "semver"}, {"status": "affected", "version": "21.1", "lessThan": "21.1*", "versionType": "semver"}, {"status": "affected", "version": "21.2", "lessThan": "21.2R3-S7", "versionType": "semver"}, {"status": "affected", "version": "21.3", "lessThan": "21.3R3-S5", "versionType": "semver"}, {"status": "affected", "version": "21.4", "lessThan": "21.4R3-S5", "versionType": "semver"}, {"status": "affected", "version": "22.1", "lessThan": "22.1R3-S4", "versionType": "semver"}, {"status": "affected", "version": "22.2", "lessThan": "22.2R3-S2", "versionType": "semver"}, {"status": "affected", "version": "22.3", "lessThan": "22.3R2-S2, 22.3R3-S1", "versionType": "semver"}, {"status": "affected", "version": "22.4", "lessThan": "22.4R2-S1, 22.4R3", "versionType": "semver"}, {"status": "affected", "version": "23,2", "lessThan": "23.2R1-S1, 23.2R2", "versionType": "semver"}]product-7cd283e8e07c377a714f066def688e2c997bf1391107ad32edecea8a128ac327Linked exactInspect raw assertions
cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 79
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5ec0d2d2-4922-4675-8a2c-57a08d7be334
cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 69
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3683a8f5-ee0e-4936-a005-df7f6b75ded3
cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 50
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
90ae30db-c448-4fe9-ac11-ff0f27cda227
cpe:2.3:o:juniper:junos:21.2:r3-s6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 40
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
737ddf96-7b1d-44e2-ad0f-e2f50858b2a3
cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09876787-a40a-4340-9c12-8628c325353b
cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 65
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f96ebe9-2532-4e35-aba5-ca68830476a4
cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 88
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
28e42a41-7965-456b-b0af-9d3229ce4d4c
cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
14eea504-cbc5-4f6f-889a-d505ec4bb5b1
cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
689fe1ae-7a85-4fb6-ab02-e732f23581b6
cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 86
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
59dda54e-6845-47eb-ae3c-5ec6bd33dfa7
cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
72e2ddf6-01df-4880-ab60-b3da3281e88d
cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 26
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4bfdcc2b-fab5-4164-8d70-28e4dff052ad
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
20ddc6b7-bfc4-4f0b-8e68-442c23765bf2
cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a0040fe2-7ecd-4755-96ce-e899ba298e0c
cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f462f4e3-762c-429f-8d25-5521100dd37c
cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 41
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2e7d597d-f6b6-44c3-9ebc-4fa0686acb5c
cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 68
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
01e3e308-fd9c-4686-8c35-8472a0e99f0d
cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 42
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cc78a4cb-d617-43fc-bb51-287d2d0c44ed
cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 37
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
39e44b09-7310-428c-8144-ae9db0484d1f
cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
283e41cb-9a90-4521-96dc-f31aa592cfd8
cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 89
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cb1a77d6-d3ad-481b-979c-8f778530b175
cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 63
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0a5b196a-2af1-4ae5-9148-a75a572807bc
cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 64
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3b457616-2d91-4913-9a7d-038bbf8f1f66
cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 49
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
255b6f20-d32f-42c1-829c-ae9c7923558a
cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 35
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e596abd9-6ecd-48dc-b770-87b7e62ea345
cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
65948abc-22bb-46d5-8545-0806edb4b86e
cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 76
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8d862e6f-0d01-4b25-8340-888c30f75a2f
cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79e56dac-75ad-4c81-9835-634b40c15da6
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- through excluding 20.4
- Match ID
e3a96966-5060-4139-a124-d4e2c879fd6c
cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 90
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3a064b6b-a99b-4d8d-a62d-b00c7870bc30
cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 44
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0c7c507e-c85e-4bc6-a3b0-549516bab524
cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 30
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
36ed4552-2420-45f9-b6e4-6da2b2b12870
cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
625ba7e6-d2ad-4a48-9b94-24328be5b06a
cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 85
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fde9e767-4713-4ea2-8d00-1382975a4a15
cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 75
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e949b21b-ad62-4022-9088-06313277479e
cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 36
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
71745d02-d226-44dc-91ad-678c85f5e6fc
cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
aa6526fb-2941-4d18-9b2e-472ad5a62a53
cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 61
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f3f54f1-75b3-400d-a735-2c27c8cebe79
cpe:2.3:o:juniper:junos:22.1:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 74
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
eff72fca-c440-4d43-9bdb-f712db413717
cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 87
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
574730b0-56c8-4a03-867b-1737148ed9b1
cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 84
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5cc9909e-ae9f-414d-99b1-83aa04d5297b
cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 47
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4bf8cd82-c338-4d9a-8c98-fcb3ceaa9227
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 55
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9962b01c-c57c-4359-9532-676ab81ce8b0
cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3d361b23-a3c2-444b-beb8-e231da950567
cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 83
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
19519212-51dd-4448-b115-8a20a40192cc
cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 82
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
786f993e-32cb-492a-a7cc-a7e4f48ea8b9
cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 56
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
62178549-b679-4902-bfdb-2993803b7fce
cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 80
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ec91f9d-deda-46b4-a39f-59a2cdb86c2e
cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 59
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2229fa59-eb24-49a2-85ce-f529a8de6ba7
cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 31
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c28a14e7-7ea0-4757-9764-e39a27cfdfa5
cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1981de38-36b5-469d-917e-92717ee3ed53
cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 46
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4624565d-8f59-44a8-b7a8-01ad579745e7
cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
977def80-0db5-4828-97ac-09bb3111d585
cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 57
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ad697df-9738-4276-94ed-7b9380cd09f5
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 27
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
216e7dde-453d-481f-92e2-9f8466cdda3f
cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 91
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
40813417-a938-4f74-a419-8c5188a35486
cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 33
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
42986538-e9d0-4c2e-b1c4-a763a4ee451b
cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 29
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3998dc76-f72f-4452-9150-652140b113eb
cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 78
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e37d4694-c80b-475e-ab5b-bb431f59c5e1
cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 45
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6514cde8-35dc-469f-89a3-078684d18f7a
cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
54010163-0810-4cf5-95fe-7e62bc6ca4f9
cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
38984199-e332-4a9c-a4c0-78083d052e15
cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 60
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0cb280d8-c5d8-4b51-a879-496accde4538
cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 77
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2f28f73e-8563-41b9-a313-bbaad5b57a67
cpe:2.3:o:juniper:junos:20.4:r3-s8:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c445622e-8e57-4990-a71a-e1993bfcb91a
cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 67
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e117e493-f4e1-4568-88e3-f243c74a2662
cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 72
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
44f6fd6c-03af-4d2c-b411-a753de12a2da
cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 62
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
476a49e7-37e9-40f9-bf2d-9bbffaa1dffc
cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 38
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
53938295-8999-4316-9ded-88e24d037852
cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c54b047c-4b38-40c0-9855-067dcf7e48bd
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 54
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4310d2d9-a8a6-48f8-9384-0a0692a1e1c3
cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 70
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1b615dba-8c53-41d4-b264-d3eed8578471
cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
41615104-c17e-44da-ab0d-6e2053bd4ef4
cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 43
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
30ff67f8-1e3c-47a8-8859-709b3614ba6e
cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 73
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d49ffb60-ba71-4902-9404-e67162919adc
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
037ba01c-3f5c-4503-a633-71765e9ef774
cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 25
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5c1c3b09-3800-493e-a319-57648305fe6e
cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 71
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3124dd0-9e42-4896-9060-cb7dd07fc342
cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 66
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b4d936ae-fd74-4823-a824-2d9f24c25bfb
cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 53
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79ed3ce8-cc57-43ab-9a26-bbc87816062d
cpe:2.3:o:juniper:junos:23.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 92
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4b3b2fe1-c228-46be-ac76-70c2687050ae
cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 48
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
57e08e70-1af3-4ba5-9a09-06dfe9663ade
cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 58
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09ff5818-0803-4646-a386-d7c645ee58a3
cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c0bc9dac-d6b5-4c5e-8c73-6e550d9a30f5
cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 51
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
93f324ae-65d3-4cfc-aeab-898ce1bd05cd
cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
076ab086-bb79-4583-aaf7-a5233dfb2f95
cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 28
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a52af794-b36b-43a6-82e9-628658624b0a
cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 39
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2307bf56-640f-49a8-b060-6acb0f653a61
cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
afa68acd-aae5-4577-b734-23aaf77bc85a
cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 81
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
591aa3e6-62a2-4a1a-a04c-e808f71d8b6e
cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 32
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4a43752d-a4af-4b4e-b95b-192e42883a5b
cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 52
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3ccbb2f4-f05b-4cc5-9b1b-eccb798d0483
cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 34
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
de22ca01-ea7e-4ee5-b59f-ee100688c1da
product-a898f63ff685a1e5584bb37ada6a97bacd2f06c517ab41310f92b8ea4f03e4b0Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 0
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
561c1113-3d59-4dd9-ada7-3c9ecc4632ec
product-0956a41596a78e1c7fdcdc55ba9a2b1e2d0b9b907c07556b9413630f55fbe991Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
78c6d8a0-92d3-4fd3-bcc1-cc7c87b76317
product-d2cc3964d4d38df127e0689c650e843c603cd3d5fab55d89bb87ab5b966d9c8cLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
927eab8b-ec3b-4b12-85b9-5517eba49a30
product-39480d6ca0a91cfc89b65e7db63d739d35e671a501f11ca16ba836f5df6b042aLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2cebf85c-736a-4e7d-956a-3e8210d4f70b
product-6f05505416e95e405a16b048a8cf9530bdcd167e4a87190b5aefc595eb2512fdLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cd647c15-a686-4c8f-a766-bc29404c0fed
product-ac33e6857eb2de48dd4bf199a18d5c2bb84a0f015b06ecae1c41aa4f21db6e36Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
45ab1622-1aed-4cd7-98f1-67779cdfc321
product-f3b4fe7c0b9f79799ad1a261cd1330f3716a1a717793297176ce2023cafce930Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
89276d88-3b8d-4168-a2cd-0920297485f2
product-4bc360c42586f41e90ae2f476437afc490f4cea8ee9ce8fee0fb842af1f4d63bLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e020556b-693f-4963-ba43-3164ab50fa49
product-da436f147780f0fb591c8e5059354909b4b6a934b3c2eb1164eb1dbf0d48f4f8Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ab0d31ff-0812-42b8-b25e-03c35ec1b021
product-7bd3ce9588192f8723011bbb1b65b46c334c0a9f033018751f4e1f3175c0a08eLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bb5ab24b-2b43-43dd-ae10-f758b4b19f2a
product-73dc63c528f4c8085f1e793a16c4776a39e9a0a451982d7e17df8d482cbeb5fbLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
80f9dc32-5adf-4430-b1a6-357d0b29db78
product-50cf8dfa31e808c01a8bb4fe6202c516237938eceeb09d4fcfea26a8cdbdb8caLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8b82d4c4-7a65-409a-926f-33c054dcbfba
product-ee89ce1408dc5af617ea071dcf7c6ee0c1853a00035b2ab3b1ae527f19c6da23Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
746c3882-2a5b-4215-b259-eb1fd60c513d
product-2b6a51b526da46a13adfbe81a96574d779fcc489de7f5d320e321e75ee9083bcLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ce535749-f4ce-4ffa-b23d-bf09c92481e5
product-78a45468910faf6442948a42f527b30268d4626a0788102e6aa7f06378ac07fdLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
dde64ec0-7e42-43af-a8fa-1a233bd3e3bc
product-1d268e18c692bf272999161f9b3efcf3d82e1134d9fa1268d887e9fe0cdf44daLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2305da9d-e6ba-48f4-80cf-9e2de7661b2f
product-1a4362faa7226de711cd2a2cd1eda102b3ea39c98de5baa426c7f7a6fae19a63Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
06a03463-6b1d-4dba-9e89-cad5e899b98b
product-bc2b1739205e37e931f5090b2d5ef6246ce121efddf302069aaf44ac10dbb157Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3aa8999c-8ae4-416f-ba2a-b1a21f33b4d7
product-6cc07b3a8be810ae3f75ba52b57dcd81571ec2947353140f41efe9fa898668deLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ccc5f6f5-4347-49d3-909a-27a3a96d36c9
product-9000e06e2c62cd29489e9c37c1a460ee0ce106ce29796b2ecd5aee4e87c6fca6Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
56ba6b86-d3f4-4496-ae46-ac513c6560fa
product-e760169326215a776d9c7a2c5f54b8d27f6e1a1d1168aa28168c06580fd93047Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5aba347c-3ef3-4f75-b4d1-54590a57c2bc
product-a7fa7f505d02b202c7f0ca0bc8ccaceb9b755144fa414352ae464854d6aad605Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2fddc897-747f-44dd-9599-7266f9b5b7b1
product-8d6e6b595aaf875be097cc39722f0a76e431823f6a05d63f7488afb8ac0e7363Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
62fc145a-d477-4c86-89e7-f70f52773801
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 0 source-reported links
Applicability remains source-scoped; safety and exposure remain unassessed.
Assessments
CVSS by origin
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HEvidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.