Known vulnerabilities in Juniper Secure Analytics (JSA) 7.5.0 UP8 IF02 - page 17

Vendor: Juniper Networks, Inc.
Software: Juniper Secure Analytics (JSA)
Version: 7.5.0 UP8 IF02
Software CPE: cpe:2.3:a:juniper_networks:jsa:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 508
Public exploits: 30
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Juniper Secure Analytics (JSA) version 7.5.0 UP8 IF02 Juniper Secure Analytics (JSA) 7.5.0 UP8 IF02 is affected by 508 vulnerabilities: 1 critical, 26 high, 143 medium, 338 low Critical High Medium Low

Vulnerabilities (508)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89338 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27269		 CWE-200 Low
No
No
 7.5.0 UP8 IF03 10.05.2024 SB2024051024
SB2024062139
#VU87855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50960		 CWE-79 Low
No
No
 7.5.0 UP8 IF03 27.03.2024 SB2024032725
SB2024062139
#VU87854 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-50961		 CWE-78 Medium
No
No
 7.5.0 UP8 IF03 27.03.2024 SB2024032725
SB2024062139
#VU87853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28784		 CWE-79 Medium
No
No
 7.5.0 UP8 IF03 27.03.2024 SB2024032725
SB2024062139
#VU87749 - Missing Authorization
CVE-2024-1488		 CWE-862 Low
No
No
 7.5.0 UP8 IF03, 7.5.0 UP11 IF03 22.03.2024 SB2024021506
SB2024032281
SB2024041058
and 28 more
#VU87499 - Resource exhaustion
CVE-2024-26602		 CWE-400 Low
No
No
 7.5.0 UP8 IF03 13.03.2024 SB2024031336
SB2024031363
SB2024031375
and 58 more
#VU86208 - Use After Free
CVE-2021-41043		 CWE-416 Medium
No
No
 7.5.0 UP8 IF03 07.02.2024 SB2022011246
SB2024020724
SB2024021202
and 9 more
#VU85852 - NULL Pointer Dereference
CVE-2023-6536		 CWE-476 Medium
No
No
 7.5.0 UP8 IF03 29.01.2024 SB2024012903
SB2024012904
SB2024012905
and 55 more
#VU79523 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35939		 CWE-59 Low
No
No
 7.5.0 UP8 IF03 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79522 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-35937		 CWE-367 Low
No
No
 7.5.0 UP8 IF03 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU79521 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-35938		 CWE-59 Low
No
No
 7.5.0 UP8 IF03 15.08.2023 SB2023081530
SB2024012452
SB2024012458
and 45 more
#VU51547 - Use After Free
CVE-2020-25656		 CWE-416 Low
No
No
 7.5.0 UP8 IF03 18.03.2021 SB2020120225
SB2021031802
SB2021031803
and 19 more
#VU48418 - Out-of-bounds read
CVE-2020-28241		 CWE-125 Medium
No
No
 7.5.0 UP8 IF03 06.11.2020 SB2020110615
SB2020111401
SB2020111404
and 32 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656		 CWE-79 Medium
No
No
 7.5.0 UP8 IF03 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more
#VU19576 - Out-of-bounds write
CVE-2019-13631		 CWE-787 Medium
No
No
 7.5.0 UP8 IF03 31.07.2019 SB2019071723
SB2019081670
SB2019081671
and 11 more
#VU18263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6708		 CWE-79 Medium
Public exploit available
No
 7.5.0 UP8 IF03 15.04.2019 SB2012072101
SB2019100301
SB2020033103
and 15 more
#VU31245 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-7500		 CWE-59 Low
No
No
 7.5.0 UP8 IF03 13.08.2018 SB2018081318
SB2018102434
SB2018080623
and 14 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 7.5.0 UP8 IF03 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU31396 - Improper Link Resolution Before File Access ('Link Following')
CVE-2017-7501		 CWE-59 Low
No
No
 7.5.0 UP8 IF03 22.11.2017 SB2017112213
SB2018102434
SB2022110933
and 13 more
#VU313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4969		 CWE-79 Low
No
No
 7.5.0 UP8 IF03 15.08.2016 SB2015021301
SB2024041230
SB2024050805
and 5 more


Showing elements 321 - 340 out of 508