Known vulnerabilities in Junos OS 21.4R1-S1 - page 11

Vendor: Juniper Networks, Inc.
Software: Junos OS
Version: 21.4R1-S1
Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 224
Public exploits: 12
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS version 21.4R1-S1 Junos OS 21.4R1-S1 is affected by 224 vulnerabilities: 1 critical, 26 high, 163 medium, 34 low Critical High Medium Low

Vulnerabilities (224)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82515 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2022-22246		 CWE-98 Medium
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82514 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-22245		 CWE-22 Low
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82513 - Improper Neutralization of Data within XPath Expressions
CVE-2022-22244		 CWE-643 Medium
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82512 - Improper Neutralization of Data within XPath Expressions
CVE-2022-22243		 CWE-643 Low
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82511 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22242		 CWE-79 Low
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82510 - Improper input validation
CVE-2022-22241		 CWE-20 High
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R3-S9, 20.1R3-S5, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.3R3, 21.4R3, 22.1R2, 22.2R1 26.10.2023 SB2022101278
#VU82389 - Allocation of Resources Without Limits or Throttling
CVE-2023-22403		 CWE-770 Medium
No
No
 20.2R3-S7, 20.4R3-S4, 21.1R3-S3, 21.2R3-S1, 21.3R3, 21.4R3, 22.1R2, 22.2R1 25.10.2023 SB2023011167
#VU81668 - Resource Management Errors
CVE-2022-22234		 CWE-399 Low
No
No
 18.4R3-S11, 19.1R3-S9, 19.2R1-S9, 19.2R3-S5, 19.3R3-S6, 19.4R2-S7, 19.4R3-S8, 20.1R3-S4, 20.2R3-S4, 20.3R3-S4, 20.4R3-S3, 21.1R3-S1, 21.2R3, 21.3R2, 21.4R2, 22.1R1 06.10.2023 SB2022101272
#VU68582 - Improper Handling of Exceptional Conditions
CVE-2022-22235		 CWE-755 Medium
No
No
 20.2R3-S5, 20.3R3-S4, 20.4R3-S3, 21.1R3-S2, 21.2R3-S1, 21.3R3, 21.4R1-S2, 21.4R2, 22.1R1-S1, 22.1R2, 22.2R1 21.10.2022 SB2022102132
#VU68572 - NULL Pointer Dereference
CVE-2022-22232		 CWE-476 Medium
No
No
 21.4R1-S2, 21.4R2, 22.1R1-S1, 22.1R2, 22.2R1 21.10.2022 SB2022102119
#VU68570 - NULL Pointer Dereference
CVE-2022-22233		 CWE-476 Low
No
No
 21.4R1-S2, 21.4R2-S1, 21.4R3, 22.1R2, 22.2R1 21.10.2022 SB2022102116
#VU68564 - Improper Authentication
CVE-2022-22237		 CWE-287 Medium
No
No
 21.2R3-S1, 21.3R2-S2, 21.3R3, 21.4R2-S1, 21.4R3, 22.1R1-S1, 22.1R2, 22.2R1 21.10.2022 SB2022102108
#VU68370 - Improper input validation
CVE-2022-22199		 CWE-20 Medium
No
No
 21.3R3-S2, 21.4R2-S2, 21.4R3, 22.1R1-S2, 22.1R3, 22.2R2, 22.3R1 17.10.2022 SB2022101735
#VU68366 - Missing release of memory after effective lifetime
CVE-2022-22228		 CWE-401 Medium
No
No
 21.1R3-S2, 21.2R3-S1, 21.3R3, 21.4R2, 22.1R2, 22.2R1 17.10.2022 SB2022101729
#VU68365 - Improper input validation
CVE-2022-22230		 CWE-20 Medium
No
No
 19.2R3-S6, 19.4R2-S8, 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S2, 21.2R3-S1, 21.3R3-S2, 21.4R2, 22.1R2, 22.3R1 17.10.2022 SB2022101728
#VU68274 - Improper Check or Handling of Exceptional Conditions
CVE-2022-22218		 CWE-703 Medium
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S7, 19.4R2-S7, 19.4R3-S9, 20.2R3-S5, 20.3R3-S4, 20.4R3-S4, 21.1R3-S1, 21.2R3, 21.3R2, 21.4R1-S2, 21.4R2, 22.1R1 12.10.2022 SB2022101262
#VU82504 - Unchecked Return Value to NULL Pointer Dereference
CVE-2022-22231		 CWE-690 Medium
No
No
 21.4R1-S2, 21.4R2, 22.1R1 12.10.2022 SB2022101274
#VU82503 - Access of Uninitialized Pointer
CVE-2022-22236		 CWE-824 Medium
No
No
 20.4R3-S4, 21.1R3-S2, 21.2R3-S2, 21.3R2-S2, 21.3R3, 21.4R1-S2, 21.4R2, 21.4R3, 22.1R1-S1, 22.1R2, 22.2R1 12.10.2022 SB2022101273
#VU65402 - Improper Handling of Exceptional Conditions
CVE-2022-22202		 CWE-755 Medium
No
No
 19.1R3-S9, 19.2R3-S6, 19.3R3-S6, 19.4R3-S8, 20.1R3-S4, 20.2R3-S5, 20.3R3-S4, 20.4R3-S4, 21.1R3-S2, 21.2R3-S1, 21.3R3, 21.4R2, 22.1R2, 22.2R1 18.07.2022 SB2022071830
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 19.4R2-S8, 19.4R3-S9, 20.2R3-S5, 20.3R3-S5, 20.4R3-S4, 21.1R3-S3, 21.2R3-S2, 21.3R3-S1, 21.4R2-S1, 21.4R3, 22.1R1-S2, 22.1R3, 22.2R1-S1, 22.2R2, 22.3R1 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more


Showing elements 201 - 220 out of 224