CVE-2021-31381

9.1 criticalEPSS 1.2%

Critical (9.1) in juniper session and resource control. EPSS 1.2% chance of exploitation in the next 30 days.

A configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWEs: CWE-16, CWE-200
Published: 2021-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

juniper:session_and_resource_control

References

https://kb.juniper.net/JSA11248
https://kb.juniper.net/JSA11248

Check your stack JSON