Known vulnerabilities in Junos OS 20.4R3-S3 - page 7

Vendor: Juniper Networks, Inc.

Software: Junos OS

Version: 20.4R3-S3

Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*

Website: https://www.juniper.net/us/en/

Total vulnerabilities: 141

Public exploits: 6

Known exploited (KEV): 5

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (141)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82515 - Improper Control of Filename for Include/Require Statement in PHP Program CVE-2022-22246	CWE-98	Medium	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82514 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-22245	CWE-22	Low	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82513 - Improper Neutralization of Data within XPath Expressions CVE-2022-22244	CWE-643	Medium	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82512 - Improper Neutralization of Data within XPath Expressions CVE-2022-22243	CWE-643	Low	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82511 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-22242	CWE-79	Low	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82510 - Improper input validation CVE-2022-22241	CWE-20	High	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1	26.10.2023	SB2022101278
#VU82389 - Allocation of Resources Without Limits or Throttling CVE-2023-22403	CWE-770	Medium	No	No	20.2R3-S7, 20.4R3-S4, 21.1R3-S3, 21.2R3-S1, 21.3R3, 21.4R3, 22.1R2, 22.2R1	25.10.2023	SB2023011167
#VU82475 - Buffer overflow CVE-2023-22399	CWE-120	Medium	No	No	19.4R3-S9, 20.2R3-S6, 20.3R3-S6, 20.4R3-S5, 21.1R3-S4, 21.2R3-S3, 21.3R3-S2, 21.4R2-S2, 21.4R3, 22.1R2, 22.2R1-S2, 22.2R2, 22.3R1	11.01.2023	SB2023011173
#VU82474 - Missing release of memory after effective lifetime CVE-2023-22406	CWE-401	Medium	No	No	19.3R3-S7, 19.4R2-S8, 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, 21.2R3-S2, 21.3R3-S1, 21.4R2-S1, 21.4R3, 22.1R2, 22.2R1	11.01.2023	SB2023011172
#VU82473 - Improper Validation of Array Index CVE-2023-22408	CWE-129	Medium	No	No	20.4R3-S5, 21.1R3-S4, 21.2R3-S3, 21.3R3-S3, 21.4R3-S2, 22.1R2-S2, 22.1R3, 22.2R3, 22.3R1-S1, 22.3R2, 22.4R1	11.01.2023	SB2023011171
#VU82472 - Unchecked Input for Loop Condition CVE-2023-22409	CWE-606	Low	No	No	19.4R3-S10, 20.2R3-S6, 20.3R3-S6, 20.4R3-S5, 21.1R3-S4, 21.2R3-S3, 21.3R3-S3, 21.4R3-S1, 22.1R2-S2, 22.1R3, 22.2R2, 22.3R1	11.01.2023	SB2023011170
#VU68368 - Incorrect Default Permissions CVE-2022-22251	CWE-276	Low	No	No	21.2R1	17.10.2022	SB2022101733
#VU68365 - Improper input validation CVE-2022-22230	CWE-20	Medium	No	No	19.2R3-S6, 19.4R2-S8, 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.2R3-S1, 21.3R3-S2, 21.4R2, 22.1R2, 22.3R1	17.10.2022	SB2022101728
#VU68277 - Improper input validation CVE-2022-22223	CWE-20	Medium	No	No	15.1R7-S11, 18.4R2-S10, 18.4R3-S10, 19.1R3-S8, 19.2R3-S4, 19.3R3-S5, 19.4R2-S6, 19.4R3-S7, 20.1R3-S3, 20.2R3-S3, 20.3R3-S2, 20.4R3-S4, 21.1R3, 21.2R3-S3, 21.3R3-S1, 21.4R1	12.10.2022	SB2022101265
#VU68274 - Improper Check or Handling of Exceptional Conditions CVE-2022-22218	CWE-703	Medium	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R2-S7, 19.4R3-S9, 20.2R3-S5, 20.3R3-S4, 20.4R3-S4, 21.1R3-S1, 21.2R3, 21.3R2, 21.4R1-S2, 21.4R2, 22.1R1	12.10.2022	SB2022101262
#VU68272 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-22225	CWE-367	Medium	No	No	19.2R3-S6, 20.2R3-S4, 20.3R3-S3, 20.4R3-S4, 21.1R2, 21.2R2, 21.3R2, 21.4R1	12.10.2022	SB2022101260
#VU82503 - Access of Uninitialized Pointer CVE-2022-22236	CWE-824	Medium	No	No	20.4R3-S4, 21.1R3-S2, 21.2R3-S2, 21.3R2-S2, 21.3R3, 21.4R1-S2, 21.4R2, 21.4R3, 22.1R1-S1, 22.1R2, 22.2R1	12.10.2022	SB2022101273
#VU65402 - Improper Handling of Exceptional Conditions CVE-2022-22202	CWE-755	Medium	No	No	19.1R3-S9, 19.2R3-S6, 19.3R3-S6, 19.4R3-S8, 20.1R3-S4, 20.2R3-S5, 20.3R3-S4, 20.4R3-S4, 21.1R3-S2, 21.2R3-S1, 21.3R3, 21.4R2, 22.1R2, 22.2R1	18.07.2022	SB2022071830
#VU82507 - Exposure of sensitive information to an unauthorized actor CVE-2022-22216	CWE-200	Low	No	No	18.4R3-S11, 19.1R2-S3, 19.1R3-S7, 19.2R1-S8, 19.2R3-S4, 19.3R3-S4, 19.4R2-S5, 19.4R3-S6, 20.1R3-S2, 20.2R3-S3, 20.3R3-S2, 20.4R3-S4, 21.1R2-S1, 21.1R3, 21.2R1-S1, 21.2R2, 21.2R3, 21.3R1	13.07.2022	SB2022071366
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2021-25220	CWE-350	Medium	No	No	19.4R2-S8, 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, 21.2R3-S2, 21.3R3-S1, 21.4R2-S1, 21.4R3, 22.1R1-S2, 22.1R3, 22.2R1-S1, 22.2R2, 22.3R1	17.03.2022	SB2022031701 SB2022031719 SB2022031725 and 57 more

Showing elements 121 - 140 out of 141

Known vulnerabilities in Junos OS 20.4R3-S3 - page 7

Vulnerabilities by Severity

Vulnerabilities (141)

Please verify you're human