Known vulnerabilities in Juniper Secure Analytics (JSA) - page 31

Vendor: Juniper Networks, Inc.
Software: Juniper Secure Analytics (JSA)
Software CPE: cpe:2.3:a:juniper_networks:jsa:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 647
Public exploits: 39
Known exploited (KEV): 9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Juniper Secure Analytics (JSA) Juniper Secure Analytics (JSA) is affected by 647 known vulnerabilities: 3 critical, 36 high, 193 medium, 415 low Critical High Medium Low

Vulnerabilities (647)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85985 - Improper Output Neutralization for Logs
CVE-2023-38020		 CWE-117 Low
No
No
 7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU85984 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38019		 CWE-22 Medium
No
No
 7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU85983 - Improper Access Control
CVE-2023-38263		 CWE-284 Low
No
No
 7.5.0 UP7 IF04 01.02.2024 SB2024020104
SB2024020105
#VU83312 - Authorization Bypass Through User-Controlled Key
CVE-2023-44981		 CWE-639 Medium
No
No
 7.5.0 UP7 IF05 20.11.2023 SB2023112072
SB2023112073
SB2023112077
and 45 more
#VU83234 - Incorrect Comparison
CVE-2023-45133		 CWE-697 Low
No
No
 7.5.0 UP7 IF04 17.11.2023 SB2023111710
SB2023111712
SB2023113028
and 26 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 7.5.0 UP7 IF04 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 7.5.0 UP7 IF04, 7.5.0 UP7 IF05 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 7.5.0 UP7 IF04 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU79285 - Use After Free
CVE-2023-3776		 CWE-416 Low
No
No
 7.5.0 UP7 IF05 09.08.2023 SB2023080930
SB2023080931
SB2023081433
and 136 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 7.5.0 UP7 IF04 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 7.5.0 UP7 IF02, 7.5.0 UP7 IF05 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 7.5.0 UP7 IF04 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 7.5.0 UP7 IF04 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 7.5.0 UP7 IF04 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 7.5.0 UP7 IF04 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 7.5.0 UP7 IF04 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 7.5.0 UP7 IF05 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 7.5.0 UP7 IF04 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU65499 - Improper input validation
CVE-2021-31684		 CWE-20 Medium
No
No
 7.5.0 UP7 IF04 20.07.2022 SB2022072048
SB2022072056
SB2022112850
and 20 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445		 CWE-79 Low
No
No
 7.5.0 UP7 IF04 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 601 - 620 out of 647