Known vulnerabilities in Juniper Secure Analytics (JSA) 7.5.0 UP7 IF03 - page 27

Version: 7.5.0 UP7 IF03
Software CPE: cpe:2.3:a:juniper_networks:jsa:*:*:*:*:*:*:*:*
Total vulnerabilities: 541
Public exploits: 31
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Juniper Secure Analytics (JSA) version 7.5.0 UP7 IF03 Juniper Secure Analytics (JSA) 7.5.0 UP7 IF03 is affected by 541 vulnerabilities: 1 critical, 28 high, 164 medium, 348 low Critical High Medium Low

Vulnerabilities (541)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85985 - Improper Output Neutralization for Logs
CVE-2023-38020
CWE-117 Low
No
No
7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU85984 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38019
CWE-22 Medium
No
No
7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU85983 - Improper Access Control
CVE-2023-38263
CWE-284 Low
No
No
7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU83234 - Incorrect Comparison
CVE-2023-45133
CWE-697 Low
No
No
7.5.0 UP7 IF04 17.11.2023 SB2023111710
SB2023111712
SB2023113028
and 24 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136
CWE-407 Medium
No
No
7.5.0 UP7 IF04 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU82122 - Improper input validation
CVE-2023-35116
CWE-20 Low
No
No
7.5.0 UP7 IF04 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804
CWE-200 Low
Public exploit available
No
7.5.0 UP7 IF04, 7.5.0 UP8 IF03, 7.5.0 UP9 IF02 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU79296 - Insufficient Verification of Data Authenticity
CVE-2023-37920
CWE-345 Medium
No
No
7.5.0 UP7 IF04, 7.5.0 UP7 IF05, 7.5.0 UP11 IF03 09.08.2023 SB2023080939
SB20230821166
SB2023090820
and 89 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883
CWE-185 Medium
No
No
7.5.0 UP7 IF04 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
7.5.0 UP7 IF04 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77362 - Resource exhaustion
CVE-2023-34455
CWE-400 Medium
No
No
7.5.0 UP7 IF04 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454
CWE-190 Medium
No
No
7.5.0 UP7 IF04 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453
CWE-190 Medium
No
No
7.5.0 UP7 IF04 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
7.5.0 UP7 IF04 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75604 - Improper Certificate Validation
CVE-2023-31484
CWE-295 Medium
No
No
7.5.0 UP7 IF04, 7.5.0 UP9 IF02 01.05.2023 SB2023050116
SB2023052927
SB2023060526
and 39 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370
CWE-674 Medium
No
No
7.5.0 UP7 IF04 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU69295 - Out-of-bounds read
CVE-2021-4048
CWE-125 Medium
No
No
7.5.0 UP7 IF04 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU69293 - Improper input validation
CVE-2022-3171
CWE-20 Medium
No
No
7.5.0 UP7 IF04 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU65499 - Improper input validation
CVE-2021-31684
CWE-20 Medium
No
No
7.5.0 UP7 IF04 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445
CWE-79 Low
No
No
7.5.0 UP7 IF04 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 521 - 540 out of 541