{"schema":"threatline.record/2","record":{"id":"CVE-2023-36847","aliases":[],"summary":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","details":"Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.","categories":["Network & edge"],"product":"Junos OS","vendor":"Juniper","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"20.4R3-S8","status":"affected","version":"0","versionType":"semver"},{"lessThan":"21.1*","status":"affected","version":"21.1","versionType":"semver"},{"lessThan":"21.2R3-S6","status":"affected","version":"21.2","versionType":"semver"},{"lessThan":"21.3R3-S5","status":"affected","version":"21.3","versionType":"semver"},{"lessThan":"21.4R3-S4","status":"affected","version":"21.4","versionType":"semver"},{"lessThan":"22.1R3-S3","status":"affected","version":"22.1","versionType":"semver"},{"lessThan":"22.2R3-S1","status":"affected","version":"22.2","versionType":"semver"},{"lessThan":"22.3R2-S2, 22.3R3","status":"affected","version":"22.3","versionType":"semver"},{"lessThan":"22.4R2-S1, 22.4R3","status":"affected","version":"22.4","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"20.4R3-S8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"21.1*","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"21.2R3-S6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"21.3R3-S5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"21.4R3-S4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"22.1R3-S3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"22.2R3-S1","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"22.3R2-S2, 22.3R3","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","source_modified_at":"2025-10-21T23:05:40.988Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Junos OS","ecosystem":null},"version":"22.4R2-S1, 22.4R3","basis":"first unaffected version stated in the CVE record"}],"cvss":5.3,"severity":"Medium","kev":{"listed":true,"date_added":"2023-11-13","due_date":"2023-11-17","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.83455,"percentile":0.99686,"score_date":"2026-10-23"},"published_at":"2023-08-17T19:16:53.657Z","modified_at":"2025-10-21T23:05:40.988Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2023-36847","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:05:40.988Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2023-36847","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"url":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US","source":"CISA KEV"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36847","source":"CISA KEV"},{"source":"CVE List","url":"https://supportportal.juniper.net/JSA72300","tags":["vendor-advisory","mitigation","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36847","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2023-11-15T16:40:41.634298Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:05:40.988Z","content_hash":"50b9b3cae12154bd93d8a768d4757881a05969ac5e9bbde799503cfa3880e527"}}