Known vulnerabilities in Juniper Secure Analytics (JSA) - page 32

Vendor: Juniper Networks, Inc.
Software: Juniper Secure Analytics (JSA)
Software CPE: cpe:2.3:a:juniper_networks:jsa:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 647
Public exploits: 39
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Juniper Secure Analytics (JSA) Juniper Secure Analytics (JSA) is affected by 647 known vulnerabilities: 3 critical, 36 high, 193 medium, 415 low Critical High Medium Low

Vulnerabilities (647)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84531 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-40787		 CWE-89 High
No
No
 7.5.0 UP7 IF03 18.12.2023 SB2023121850
SB2023121851
SB2023122831
#VU84530 - Improper Access Control
CVE-2023-47146		 CWE-284 Low
No
No
 7.5.0 UP7 IF03 18.12.2023 SB2023121851
SB2023122831
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 7.5.0 UP7 IF03 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 7.5.0 UP7 IF03 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 7.5.0 UP7 IF03 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 7.5.0 UP7 IF03 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.5.0 UP7 IF03, 7.5.0 UP9 IF02, 7.5.0 UP12 IF03 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 7.5.0 UP7 IF03 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 7.5.0 UP7 IF03 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 7.5.0 UP7 IF03 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80762 - Resource exhaustion
CVE-2023-41835		 CWE-400 Medium
No
No
 7.5.0 UP7 IF03 13.09.2023 SB2023091364
SB2023110308
SB2023113020
and 7 more
#VU80523 - Out-of-bounds write
CVE-2020-22218		 CWE-787 Medium
No
No
 7.5.0 UP7 IF02 07.09.2023 SB2023090729
SB2023090732
SB2023090843
and 21 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 7.5.0 UP7 IF03 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU79928 - Deserialization of Untrusted Data
CVE-2023-34040		 CWE-502 Medium
Available
No
 7.5.0 UP7 IF03 23.08.2023 SB2023082369
SB2023110816
SB2023121130
and 3 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 7.5.0 UP7 IF02, 7.5.0 UP7 IF05 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 7.5.0 UP7 IF03 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 7.5.0 UP7 IF03 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78326 - Out-of-bounds write
CVE-2023-35001		 CWE-787 Low
Available
No
 7.5.0 UP7 IF03 17.07.2023 SB2023071735
SB2023071736
SB2023072077
and 129 more
#VU75807 - Use After Free
CVE-2023-32233		 CWE-416 Low
Available
No
 7.5.0 UP7 IF03 09.05.2023 SB2023050923
SB2023051402
SB2023053054
and 100 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 7.5.0 UP7 IF03 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more


Showing elements 621 - 640 out of 647