Approved changes feed: RSS · Atom

cpe:2.3:o:juniper:junos:10.0:*:*:*:*:*:*:*

part: o version: 10.0 update: *

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductJunos (6ea6f819-7476-55ab-b2c2-610a974c5e60)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3818 vulnerable 2026-06-08 05:05:42.935226 Details available
Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.
Published: 2014-10-14T14:00:00.000Z
Updated: 2024-08-06T10:57:17.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2712 vulnerable 2026-06-08 05:05:29.641483 Details available
Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, and 12.2 before 12.2R1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to index.php.
Published: 2014-04-14T15:00:00.000Z
Updated: 2024-08-06T10:21:35.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7313 vulnerable 2026-06-08 05:05:09.663423 Details available
The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Published: 2014-01-23T17:00:00.000Z
Updated: 2024-09-16T17:24:00.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6618 vulnerable 2026-06-08 05:04:57.220141 Details available
jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3, and 12.3 before 12.3R1 allows remote authenticated users to execute arbitrary commands via the rsargs parameter in an exec action.
Published: 2013-11-05T20:00:00.000Z
Updated: 2024-08-06T17:46:22.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6170 vulnerable 2026-06-08 05:04:55.519034 Details available
Juniper Junos 10.0 before 10.0S28, 10.4 before 10.4R7, 11.1 before 11.1R5, 11.2 before 11.2R2, and 11.4 before 11.4R1, when in a Next-Generation Multicast VPN (NGEN MVPN) environment, allows remote attackers to cause a denial of service (RPD routing daemon crash) via a large number of crafted PIM (S,G) join requests.
Published: 2013-10-17T23:00:00.000Z
Updated: 2024-08-06T17:29:42.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.