Known vulnerabilities in Junos OS 21.4R1-S2

Vendor: Juniper Networks, Inc.
Software: Junos OS
Version: 21.4R1-S2
Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 218
Public exploits: 12
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS version 21.4R1-S2 Junos OS 21.4R1-S2 is affected by 218 vulnerabilities: 1 critical, 26 high, 158 medium, 33 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130698 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-33790		 CWE-754 Medium
No
No
 21.2R3-S10, 21.4R3-S12, 22.4R3-S9, 23.2R2-S6, 23.4R2-S7, 24.2R2-S3, 24.4R2-S3, 25.2R1-S2, 25.2R2, 25.4R1 08.05.2026 SB2026050823
#VU105679 - Permissions, Privileges, and Access Controls
CVE-2025-21590		 CWE-264 High
No
Exploited
 21.2R3-S9, 21.4R3-S10, 22.2R3-S6, 22.4R3-S6, 23.2R2-S3, 23.4R2-S4, 24.2R1-S2, 24.2R2, 24.4R1 12.03.2025 SB2025031279
#VU102533 - Out-of-bounds read
CVE-2025-21600		 CWE-125 Medium
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S5, 23.2R2-S3, 23.4R2-S3, 24.2R1-S2, 24.2R2, 24.4R1 10.01.2025 SB2025011032
#VU102532 - Improper Check or Handling of Exceptional Conditions
CVE-2025-21602		 CWE-703 Medium
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S5, 23.2R2-S3, 23.4R2-S3, 24.2R1-S2, 24.2R2, 24.4R1 10.01.2025 SB2025011027
#VU102523 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21592		 CWE-200 Low
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S2, 23.2R2-S1, 23.4R2, 24.2R1 10.01.2025 SB2025011009
#VU102521 - Improper control of a resource through its lifetime
CVE-2025-21593		 CWE-664 Medium
No
No
 21.2R3-S9, 21.4R3-S10, 22.2R3-S5, 22.3R3-S4, 22.4R3-S3, 23.2R2-S2, 23.4R2, 24.2R1 10.01.2025 SB2025011008
#VU102488 - Improper Handling of Exceptional Conditions
CVE-2025-21596		 CWE-755 Low
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S4, 23.2R2-S3, 23.4R2-S1, 24.2R1 09.01.2025 SB2025010933
#VU98413 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-47494		 CWE-362 Low
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S3, 23.2R2-S2, 23.4R2, 24.2R1 11.10.2024 SB2024101139
#VU98410 - Missing release of memory after effective lifetime
CVE-2024-47493		 CWE-401 Medium
No
No
 21.2R3-S7, 21.4R3-S6, 22.1R3-S5, 22.2R3-S3, 22.3R3-S2, 22.4R3, 23.2R2, 23.4R1, 23.4R2, 24.1R1 11.10.2024 SB2024101136
#VU98409 - Improper Validation of Consistency within Input
CVE-2024-39515		 CWE-1288 Medium
No
No
 21.4R3-S8, 22.2R3-S5 11.10.2024 SB2024101135
#VU98407 - Resource exhaustion
CVE-2024-47497		 CWE-400 Medium
No
No
 21.4R3-S7, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1 11.10.2024 SB2024101134
#VU98406 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-47507		 CWE-754 Medium
No
No
 21.4R3-S6, 22.1R3-S6, 22.2R3-S3, 22.4R3, 23.2R1 11.10.2024 SB2024101133
#VU98404 - Improper Handling of Exceptional Conditions
CVE-2024-39526		 CWE-755 Medium
No
No
 21.2R3-S7, 21.4R3-S6, 22.2R3-S3, 22.4R3, 23.2R2, 23.4R2, 24.2R1 11.10.2024 SB2024101131
#VU98403 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-47503		 CWE-754 Medium
No
No
 21.4R3-S9, 22.2R3-S5 11.10.2024 SB2024101130
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU68495 - Out-of-bounds read
CVE-2022-41742		 CWE-125 Medium
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 34 more
#VU68494 - Out-of-bounds read
CVE-2022-41741		 CWE-125 Medium
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 19.10.2022 SB2022101941
SB2022111503
SB2022111601
and 32 more
#VU59319 - Origin Validation Error
CVE-2021-3618		 CWE-346 Medium
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 09.01.2022 SB2022010903
SB2022010904
SB2022010905
and 37 more
#VU53543 - Off-by-one Error
CVE-2021-23017		 CWE-193 High
Public exploit available
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372		 CWE-444 Medium
Public exploit available
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more


Showing elements 1 - 20 out of 218