CWE-794 · 4 records
Incomplete Filtering of Multiple Instances of Special Elements
CVEs in this class
4 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-0002No exploit | Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effectjuniper · junos · CWE-794 | Critical9.8 | — | 2.3% | Jan 15, 2019 |
34Monitor | CVE-2021-0203No exploit | Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configuredjuniper · junos · CWE-794 | High8.6 | — | 1.0% | Jan 15, 2021 |
26Monitor | CVE-2026-21876Proof of concept | OWASP CRS has multipart bypass using multiple content-type partsowasp · owasp modsecurity core rule set · CWE-794 | Medium5.3 | — | 17.8% | Jan 8, 2026 |
21Monitor | CVE-2020-1665No exploit | Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.juniper · junos · CWE-794 | Medium5.3 | — | 1.2% | Oct 16, 2020 |
- CVE-2019-000240Plan
Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
CriticalCVSS 9.8No exploitEPSS 2%juniper · junosJan 15, 2019
- CVE-2021-020334Monitor
Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
HighCVSS 8.6No exploitEPSS 1%juniper · junosJan 15, 2021
- CVE-2026-2187626Monitor
OWASP CRS has multipart bypass using multiple content-type parts
MediumCVSS 5.3Proof of conceptEPSS 17%owasp · owasp modsecurity core rule setJan 8, 2026
- CVE-2020-166521Monitor
Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.
MediumCVSS 5.3No exploitEPSS 1%juniper · junosOct 16, 2020