Known vulnerabilities in Contrail Networking

Vendor: Juniper Networks, Inc.
Software: Contrail Networking
Software CPE: cpe:2.3:a:juniper_networks:contrail_networking:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Contrail Networking Contrail Networking is affected by 30 known vulnerabilities: 10 high, 15 medium, 5 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 2011.L5 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 2011.L5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 2011.L5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 2011.L5 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU60007 - Improper input validation
CVE-2021-4034		 CWE-20 Medium
Available
Exploited
 2011.L5 26.01.2022 SB2022012601
SB2022012604
SB2022012605
and 51 more
#VU59966 - Integer overflow
CVE-2022-23852		 CWE-190 High
No
No
 2011.L5 25.01.2022 SB2022012504
SB2022012622
SB2022020902
and 58 more
#VU59647 - Integer overflow
CVE-2022-22824		 CWE-190 High
No
No
 2011.L5 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59646 - Integer overflow
CVE-2022-22823		 CWE-190 High
No
No
 2011.L5 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 57 more
#VU59645 - Integer overflow
CVE-2022-22822		 CWE-190 High
No
No
 2011.L5 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 59 more
#VU59642 - Resource exhaustion
CVE-2021-45960		 CWE-400 Medium
No
No
 2011.L5 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 2011.L5 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU58477 - Heap-based Buffer Overflow
CVE-2021-43527		 CWE-122 High
No
No
 2011.L5 01.12.2021 SB2021120123
SB2021120124
SB2021120201
and 66 more
#VU57487 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-35550		 CWE-300 Medium
No
No
 2011.L5 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 102 more
#VU57346 - Use After Free
CVE-2016-4658		 CWE-416 High
No
No
 2011.L5 13.10.2021 SB2016092503
SB2021101345
SB2021102109
and 9 more
#VU53336 - Improper input validation
CVE-2021-31535		 CWE-20 Low
No
No
 2011.L5 19.05.2021 SB2021051908
SB2021051923
SB2021052001
and 26 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 2011.L5 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 2011.L5 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU26418 - Deserialization of Untrusted Data
CVE-2017-5929		 CWE-502 High
No
No
 2011.L5 27.03.2020 SB2017031302
SB2020032701
SB2022101720
and 1 more
#VU22565 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-0205		 CWE-835 Medium
No
No
 2011.L5 06.11.2019 SB2019102916
SB2020031305
SB2021071503
and 11 more
#VU20199 - Resource exhaustion
CVE-2019-9518		 CWE-400 Medium
No
No
 2011.L5 13.08.2019 SB2019081326
SB2019091011
SB2019091102
and 26 more


Showing elements 1 - 20 out of 30