CVE-2021-31381: Juniper Session And Resource Control

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system.

Affected products

• Juniper Session And Resource Control: before 4.12.0r5 (fixed in 4.12.0r5); from 4.13.0r1, before 4.13.0r3 (fixed in 4.13.0r3)

Published 2021-10-19. Last modified 2026-06-17.