Juniper Appformix vulnerabilities

2 CVEs affecting Juniper Appformix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-0265, published 2021-04-22.

More from Juniper.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-0265, published 2021-04-22. High severity, CVSS 8.1. EPSS: 2.5% chance of exploitation in the next 30 days. An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when…
• CVE-2018-0015, published 2018-02-22. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A malicious user with unrestricted access to the AppFormix application management platform may be able to access a Python debug console and execute system commands with root privilege. The AppFormix…