Juniper Identity Management Service vulnerabilities

2 CVEs affecting Juniper Identity Management Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22187, published 2022-04-14.

More from Juniper.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0042, published 2019-04-10. Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days. Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an…
• CVE-2022-22187, published 2022-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service (JIMS) allows an unprivileged user to trigger a…