CVE Watch—

CVE-2020-1631

Juniper Junos OS Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

4.8%

p92

KEV

YES

Mar 25, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

4.7%EPSS · 30 days4.8%

2026-09-162026-10-14

KEV catalog record

Product

Juniper / Junos OS

Vulnerability

Juniper Junos OS Path Traversal Vulnerability

Added to KEV

Mar 25, 2022

Remediate by

Apr 15, 2022

Known ransomware use

Summary description

A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-1631

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-215904.4 MED

77.2%

KEV—73Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability14d CVE-2023-36845—

99.9%

KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2023-36846—

99.8%

KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2023-36844—

99.8%

KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2023-36847—

99.7%

KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2023-36851—

65.6%

KEV—70Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—