Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:43:39 +0000 CVE-2023-36844 — Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment v… https://cve.radiocsirt.org/vuln/cve-2023-36844 <p><strong>Affected:</strong> Juniper Networks Junos OS</p> <p>A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.</p> <p>Using a crafted request an attacker is able to modify</p> <p>certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series:</p> <p>* All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions</p> <p>prior to</p> <p>21.3R3-S5; * 21.4 versions</p> <p>prior to</p> <p>21.4R3-S5; * 22.1 versions</p> <p>prior to</p> <p>22.1R3-S4; * 22.2 versions</p> <p>prior to</p> <p>22.2R3-S2; * 22.3 versions</p> <p>prior to 22.3R3-S1; * 22.4 versions</p> <p>prior to</p> <p>22.4R2-S2, 22.4R3; * 23.2 versions prior to</p> <p>23.2R1-S1, 23.2R2.</p> <p><strong>Affected:</strong> Juniper Networks Junos OS</p> <p>A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables.</p> <p>Using a crafted request an attacker is able to modify</p> <p>certain PHP environment variables leading to partial loss of integrity, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series:</p> <p>* All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions</p> <p>prior to</p> <p>21.3R3-S5; * 21.4 versions</p> <p>prior to</p> <p>21.4R3-S5; * 22.1 versions</p> <p>prior to</p> <p>22.1R3-S4; * 22.2 versions</p> <p>prior to</p> <p>22.2R3-S2; * 22.3 versions</p> <p>prior to 22.3R3-S1; * 22.4 versions</p> <p>prior to</p> <p>22.4R2-S2, 22.4R3; * 23.2 versions prior to</p> <p>23.2R1-S1, 23.2R2.</p> https://cve.radiocsirt.org/vuln/cve-2023-36844