CISA KEV · catalog date Nov 13, 2023 · first observed Jul 19, 2026
Evidence dossier
CVE-2023-36846
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Exploited in the wild (CISA KEV since Nov 13, 2023). NVD reports CVSS 3.1 5.3. EPSS estimates 95.1% exploit likelihood as of Aug 18, 2026.
As of Aug 27, 2026
Normalized restatement
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.
- State
- PUBLISHED
- Published
- Aug 17, 2023
- Updated
- Oct 21, 2025
- Evidence coverage
- 99%
Evidence chronology
What was known when
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCACVE ProgramOriginal evidence ↗
Record text: CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
- Source dateSource date omittedFirst observed by CASCAjuniperOriginal evidence ↗
Record text: Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Inspect raw assertion
- Field
container- Value
- Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 95.1% probability · 99.86th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.951010000000; percentile 0.998570000000
FIRST EPSS · score date Aug 18, 2026 · 99.9th percentile · first observed Aug 18, 2026
NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot
Evidence detail
Source limits and decisions
Why each evidence state has this value
Outside this view’s verified evidenceReason detail begins outside this selected snapshot; the state remains source-bound.
Source comparison
Who said what
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Inspect raw assertion
- Field
container- Value
- Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
95.1% probability · 99.86th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.951010000000; percentile 0.998570000000
Applicability
Cited product scope
Grouped from 2 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
30 scope groups
Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "0", "lessThan": "20.4R3-S8", "versionType": "semver"}, {"status": "affected", "version": "21.1", "lessThan": "21.1*", "versionType": "semver"}, {"status": "affected", "version": "21.2", "lessThan": "21.2R3-S6", "versionType": "semver"}, {"status": "affected", "version": "21.3", "lessThan": "21.3R3-S5", "versionType": "semver"}, {"status": "affected", "version": "21.4", "lessThan": "21.4R3-S5", "versionType": "semver"}, {"status": "affected", "version": "22.1", "lessThan": "22.1R3-S3", "versionType": "semver"}, {"status": "affected", "version": "22.2", "lessThan": "22.2R3-S2", "versionType": "semver"}, {"status": "affected", "version": "22.3", "lessThan": "22.3R2-S2, 22.3R3", "versionType": "semver"}, {"status": "affected", "version": "22.4", "lessThan": "22.4R2-S1, 22.4R3", "versionType": "semver"}]product-7cd283e8e07c377a714f066def688e2c997bf1391107ad32edecea8a128ac327Linked exactInspect raw assertions
cpe:2.3:o:juniper:junos:21.3:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 48
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
90ae30db-c448-4fe9-ac11-ff0f27cda227
cpe:2.3:o:juniper:junos:21.3:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 43
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6514cde8-35dc-469f-89a3-078684d18f7a
cpe:2.3:o:juniper:junos:22.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 79
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
786f993e-32cb-492a-a7cc-a7e4f48ea8b9
cpe:2.3:o:juniper:junos:22.1:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 68
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1b615dba-8c53-41d4-b264-d3eed8578471
cpe:2.3:o:juniper:junos:21.3:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 46
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
57e08e70-1af3-4ba5-9a09-06dfe9663ade
cpe:2.3:o:juniper:junos:20.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09876787-a40a-4340-9c12-8628c325353b
cpe:2.3:o:juniper:junos:21.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 57
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2229fa59-eb24-49a2-85ce-f529a8de6ba7
cpe:2.3:o:juniper:junos:21.1:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a0040fe2-7ecd-4755-96ce-e899ba298e0c
cpe:2.3:o:juniper:junos:21.3:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 44
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4624565d-8f59-44a8-b7a8-01ad579745e7
cpe:2.3:o:juniper:junos:20.4:r3-s6:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
14eea504-cbc5-4f6f-889a-d505ec4bb5b1
cpe:2.3:o:juniper:junos:21.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 51
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79ed3ce8-cc57-43ab-9a26-bbc87816062d
cpe:2.3:o:juniper:junos:21.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 55
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ad697df-9738-4276-94ed-7b9380cd09f5
cpe:2.3:o:juniper:junos:22.1:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 64
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b4d936ae-fd74-4823-a824-2d9f24c25bfb
cpe:2.3:o:juniper:junos:22.3:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 80
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
19519212-51dd-4448-b115-8a20a40192cc
cpe:2.3:o:juniper:junos:22.3:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 84
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
574730b0-56c8-4a03-867b-1737148ed9b1
cpe:2.3:o:juniper:junos:21.2:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 38
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2307bf56-640f-49a8-b060-6acb0f653a61
cpe:2.3:o:juniper:junos:21.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 56
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
09ff5818-0803-4646-a386-d7c645ee58a3
cpe:2.3:o:juniper:junos:20.4:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
283e41cb-9a90-4521-96dc-f31aa592cfd8
cpe:2.3:o:juniper:junos:21.1:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
625ba7e6-d2ad-4a48-9b94-24328be5b06a
cpe:2.3:o:juniper:junos:22.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 87
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3a064b6b-a99b-4d8d-a62d-b00c7870bc30
cpe:2.3:o:juniper:junos:20.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
65948abc-22bb-46d5-8545-0806edb4b86e
cpe:2.3:o:juniper:junos:21.1:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
79e56dac-75ad-4c81-9835-634b40c15da6
cpe:2.3:o:juniper:junos:22.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 73
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8d862e6f-0d01-4b25-8340-888c30f75a2f
cpe:2.3:o:juniper:junos:21.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 33
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
de22ca01-ea7e-4ee5-b59f-ee100688c1da
cpe:2.3:o:juniper:junos:21.4:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 54
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
62178549-b679-4902-bfdb-2993803b7fce
cpe:2.3:o:juniper:junos:21.1:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5c1c3b09-3800-493e-a319-57648305fe6e
cpe:2.3:o:juniper:junos:21.4:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 58
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0cb280d8-c5d8-4b51-a879-496accde4538
cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
20ddc6b7-bfc4-4f0b-8e68-442c23765bf2
cpe:2.3:o:juniper:junos:22.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 77
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9ec91f9d-deda-46b4-a39f-59a2cdb86c2e
cpe:2.3:o:juniper:junos:21.1:r3-s5:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 25
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4bfdcc2b-fab5-4164-8d70-28e4dff052ad
cpe:2.3:o:juniper:junos:21.3:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 39
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2e7d597d-f6b6-44c3-9ebc-4fa0686acb5c
cpe:2.3:o:juniper:junos:21.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 31
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4a43752d-a4af-4b4e-b95b-192e42883a5b
cpe:2.3:o:juniper:junos:22.3:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 83
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
59dda54e-6845-47eb-ae3c-5ec6bd33dfa7
cpe:2.3:o:juniper:junos:22.3:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 81
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5cc9909e-ae9f-414d-99b1-83aa04d5297b
cpe:2.3:o:juniper:junos:21.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 30
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c28a14e7-7ea0-4757-9764-e39a27cfdfa5
cpe:2.3:o:juniper:junos:22.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 86
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cb1a77d6-d3ad-481b-979c-8f778530b175
cpe:2.3:o:juniper:junos:21.3:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 45
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4bf8cd82-c338-4d9a-8c98-fcb3ceaa9227
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 26
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
216e7dde-453d-481f-92e2-9f8466cdda3f
cpe:2.3:o:juniper:junos:21.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 52
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
4310d2d9-a8a6-48f8-9384-0a0692a1e1c3
cpe:2.3:o:juniper:junos:21.2:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 32
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
42986538-e9d0-4c2e-b1c4-a763a4ee451b
cpe:2.3:o:juniper:junos:21.3:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 40
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cc78a4cb-d617-43fc-bb51-287d2d0c44ed
cpe:2.3:o:juniper:junos:22.1:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 70
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
44f6fd6c-03af-4d2c-b411-a753de12a2da
cpe:2.3:o:juniper:junos:21.3:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 49
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
93f324ae-65d3-4cfc-aeab-898ce1bd05cd
cpe:2.3:o:juniper:junos:21.3:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 50
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3ccbb2f4-f05b-4cc5-9b1b-eccb798d0483
cpe:2.3:o:juniper:junos:21.1:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
54010163-0810-4cf5-95fe-7e62bc6ca4f9
cpe:2.3:o:juniper:junos:21.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 61
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0a5b196a-2af1-4ae5-9148-a75a572807bc
cpe:2.3:o:juniper:junos:22.1:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 65
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e117e493-f4e1-4568-88e3-f243c74a2662
cpe:2.3:o:juniper:junos:21.1:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f462f4e3-762c-429f-8d25-5521100dd37c
cpe:2.3:o:juniper:junos:22.1:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 66
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
01e3e308-fd9c-4686-8c35-8472a0e99f0d
cpe:2.3:o:juniper:junos:22.3:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 82
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
fde9e767-4713-4ea2-8d00-1382975a4a15
cpe:2.3:o:juniper:junos:22.1:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 63
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f96ebe9-2532-4e35-aba5-ca68830476a4
cpe:2.3:o:juniper:junos:22.2:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 76
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5ec0d2d2-4922-4675-8a2c-57a08d7be334
cpe:2.3:o:juniper:junos:21.2:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 36
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
39e44b09-7310-428c-8144-ae9db0484d1f
cpe:2.3:o:juniper:junos:21.2:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 28
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3998dc76-f72f-4452-9150-652140b113eb
cpe:2.3:o:juniper:junos:22.1:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 67
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3683a8f5-ee0e-4936-a005-df7f6b75ded3
cpe:2.3:o:juniper:junos:20.4:r2-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
aa6526fb-2941-4d18-9b2e-472ad5a62a53
cpe:2.3:o:juniper:junos:21.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 53
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9962b01c-c57c-4359-9532-676ab81ce8b0
cpe:2.3:o:juniper:junos:22.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 72
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e949b21b-ad62-4022-9088-06313277479e
cpe:2.3:o:juniper:junos:21.3:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 42
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0c7c507e-c85e-4bc6-a3b0-549516bab524
cpe:2.3:o:juniper:junos:21.4:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 62
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3b457616-2d91-4913-9a7d-038bbf8f1f66
cpe:2.3:o:juniper:junos:21.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 60
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
476a49e7-37e9-40f9-bf2d-9bbffaa1dffc
cpe:2.3:o:juniper:junos:20.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c54b047c-4b38-40c0-9855-067dcf7e48bd
cpe:2.3:o:juniper:junos:22.2:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 78
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
591aa3e6-62a2-4a1a-a04c-e808f71d8b6e
cpe:2.3:o:juniper:junos:20.4:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1981de38-36b5-469d-917e-92717ee3ed53
cpe:2.3:o:juniper:junos:22.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 74
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2f28f73e-8563-41b9-a313-bbaad5b57a67
cpe:2.3:o:juniper:junos:21.3:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 41
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
30ff67f8-1e3c-47a8-8859-709b3614ba6e
cpe:2.3:o:juniper:junos:20.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
41615104-c17e-44da-ab0d-6e2053bd4ef4
cpe:2.3:o:juniper:junos:20.4:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
38984199-e332-4a9c-a4c0-78083d052e15
cpe:2.3:o:juniper:junos:21.1:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
c0bc9dac-d6b5-4c5e-8c73-6e550d9a30f5
cpe:2.3:o:juniper:junos:22.1:r3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 69
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b3124dd0-9e42-4896-9060-cb7dd07fc342
cpe:2.3:o:juniper:junos:21.2:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 35
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
71745d02-d226-44dc-91ad-678c85f5e6fc
cpe:2.3:o:juniper:junos:21.3:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 47
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
255b6f20-d32f-42c1-829c-ae9c7923558a
cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
037ba01c-3f5c-4503-a633-71765e9ef774
cpe:2.3:o:juniper:junos:20.4:r3-s3:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
afa68acd-aae5-4577-b734-23aaf77bc85a
cpe:2.3:o:juniper:junos:21.2:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 27
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a52af794-b36b-43a6-82e9-628658624b0a
cpe:2.3:o:juniper:junos:21.1:r2-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
689fe1ae-7a85-4fb6-ab02-e732f23581b6
cpe:2.3:o:juniper:junos:21.2:r1-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 29
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
36ed4552-2420-45f9-b6e4-6da2b2b12870
cpe:2.3:o:juniper:junos:21.1:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
076ab086-bb79-4583-aaf7-a5233dfb2f95
cpe:2.3:o:juniper:junos:22.4:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 88
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
40813417-a938-4f74-a419-8c5188a35486
cpe:2.3:o:juniper:junos:22.4:r1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 85
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
28e42a41-7965-456b-b0af-9d3229ce4d4c
cpe:2.3:o:juniper:junos:20.4:-:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3d361b23-a3c2-444b-beb8-e231da950567
cpe:2.3:o:juniper:junos:21.2:r3-s4:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 37
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
53938295-8999-4316-9ded-88e24d037852
cpe:2.3:o:juniper:junos:20.4:r3-s7:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
977def80-0db5-4828-97ac-09bb3111d585
cpe:2.3:o:juniper:junos:21.2:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 34
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e596abd9-6ecd-48dc-b770-87b7e62ea345
cpe:2.3:o:juniper:junos:21.4:r3-s1:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 59
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5f3f54f1-75b3-400d-a735-2c27c8cebe79
cpe:2.3:o:juniper:junos:22.1:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 71
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d49ffb60-ba71-4902-9404-e67162919adc
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- through excluding 20.4
- Match ID
e3a96966-5060-4139-a124-d4e2c879fd6c
cpe:2.3:o:juniper:junos:22.2:r2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 75
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e37d4694-c80b-475e-ab5b-bb431f59c5e1
cpe:2.3:o:juniper:junos:21.1:r3-s2:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
72e2ddf6-01df-4880-ab60-b3da3281e88d
product-a898f63ff685a1e5584bb37ada6a97bacd2f06c517ab41310f92b8ea4f03e4b0Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 0
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
561c1113-3d59-4dd9-ada7-3c9ecc4632ec
product-0956a41596a78e1c7fdcdc55ba9a2b1e2d0b9b907c07556b9413630f55fbe991Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 1
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
78c6d8a0-92d3-4fd3-bcc1-cc7c87b76317
product-d2cc3964d4d38df127e0689c650e843c603cd3d5fab55d89bb87ab5b966d9c8cLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 2
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
927eab8b-ec3b-4b12-85b9-5517eba49a30
product-39480d6ca0a91cfc89b65e7db63d739d35e671a501f11ca16ba836f5df6b042aLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2cebf85c-736a-4e7d-956a-3e8210d4f70b
product-6f05505416e95e405a16b048a8cf9530bdcd167e4a87190b5aefc595eb2512fdLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
cd647c15-a686-4c8f-a766-bc29404c0fed
product-ac33e6857eb2de48dd4bf199a18d5c2bb84a0f015b06ecae1c41aa4f21db6e36Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
45ab1622-1aed-4cd7-98f1-67779cdfc321
product-f3b4fe7c0b9f79799ad1a261cd1330f3716a1a717793297176ce2023cafce930Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
89276d88-3b8d-4168-a2cd-0920297485f2
product-4bc360c42586f41e90ae2f476437afc490f4cea8ee9ce8fee0fb842af1f4d63bLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
e020556b-693f-4963-ba43-3164ab50fa49
product-da436f147780f0fb591c8e5059354909b4b6a934b3c2eb1164eb1dbf0d48f4f8Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx240m:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ab0d31ff-0812-42b8-b25e-03c35ec1b021
product-7bd3ce9588192f8723011bbb1b65b46c334c0a9f033018751f4e1f3175c0a08eLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bb5ab24b-2b43-43dd-ae10-f758b4b19f2a
product-73dc63c528f4c8085f1e793a16c4776a39e9a0a451982d7e17df8d482cbeb5fbLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
80f9dc32-5adf-4430-b1a6-357d0b29db78
product-50cf8dfa31e808c01a8bb4fe6202c516237938eceeb09d4fcfea26a8cdbdb8caLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
8b82d4c4-7a65-409a-926f-33c054dcbfba
product-ee89ce1408dc5af617ea071dcf7c6ee0c1853a00035b2ab3b1ae527f19c6da23Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
746c3882-2a5b-4215-b259-eb1fd60c513d
product-2b6a51b526da46a13adfbe81a96574d779fcc489de7f5d320e321e75ee9083bcLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ce535749-f4ce-4ffa-b23d-bf09c92481e5
product-78a45468910faf6442948a42f527b30268d4626a0788102e6aa7f06378ac07fdLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
dde64ec0-7e42-43af-a8fa-1a233bd3e3bc
product-1d268e18c692bf272999161f9b3efcf3d82e1134d9fa1268d887e9fe0cdf44daLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2305da9d-e6ba-48f4-80cf-9e2de7661b2f
product-1a4362faa7226de711cd2a2cd1eda102b3ea39c98de5baa426c7f7a6fae19a63Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
06a03463-6b1d-4dba-9e89-cad5e899b98b
product-bc2b1739205e37e931f5090b2d5ef6246ce121efddf302069aaf44ac10dbb157Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3aa8999c-8ae4-416f-ba2a-b1a21f33b4d7
product-6cc07b3a8be810ae3f75ba52b57dcd81571ec2947353140f41efe9fa898668deLinked exactInspect raw assertion
cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ccc5f6f5-4347-49d3-909a-27a3a96d36c9
product-9000e06e2c62cd29489e9c37c1a460ee0ce106ce29796b2ecd5aee4e87c6fca6Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
56ba6b86-d3f4-4496-ae46-ac513c6560fa
product-e760169326215a776d9c7a2c5f54b8d27f6e1a1d1168aa28168c06580fd93047Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5aba347c-3ef3-4f75-b4d1-54590a57c2bc
product-a7fa7f505d02b202c7f0ca0bc8ccaceb9b755144fa414352ae464854d6aad605Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 21
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2fddc897-747f-44dd-9599-7266f9b5b7b1
product-8d6e6b595aaf875be097cc39722f0a76e431823f6a05d63f7488afb8ac0e7363Linked exactInspect raw assertion
cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 0 · node/1 · match 22
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
62fc145a-d477-4c86-89e7-f70f52773801
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 0 source-reported links
Applicability remains source-scoped; safety and exposure remain unassessed.
Assessments
CVSS by origin
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NEvidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Affected-product evidence remains source-scoped; canonical linkage is required before applicability scoring.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.