Known vulnerabilities in Junos OS 21.4R3-S2 - page 7

Vendor: Juniper Networks, Inc.
Software: Junos OS
Version: 21.4R3-S2
Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 138
Public exploits: 11
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS version 21.4R3-S2 Junos OS 21.4R3-S2 is affected by 138 vulnerabilities: 1 critical, 13 high, 105 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81667 - Improper input validation
CVE-2017-7653		 CWE-20 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.3R3-S8, 19.4R3-S11, 20.2R3-S7, 20.3R3-S6, 20.4R3-S7, 21.1R3-S4, 21.2R3-S5, 21.3R3-S4, 21.4R3-S4, 22.1R3, 22.2R3, 22.3R2, 22.4R1 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU81666 - Missing release of memory after effective lifetime
CVE-2017-7654		 CWE-401 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.3R3-S8, 19.4R3-S11, 20.2R3-S7, 20.3R3-S6, 20.4R3-S7, 21.1R3-S4, 21.2R3-S5, 21.3R3-S4, 21.4R3-S4, 22.1R3, 22.2R3, 22.3R2, 22.4R1 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU80622 - Unrestricted Upload of File with Dangerous Type
CVE-2023-36851		 CWE-434 High
No
Exploited
 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S4, 21.4R3-S5, 22.1R3-S3, 22.2R3-S1, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3, 23.2R1 11.09.2023 SB2023081879
#VU80111 - Improper input validation
CVE-2023-4481		 CWE-20 Medium
No
No
 - 29.08.2023 SB2023082953
#VU79690 - Unrestricted Upload of File with Dangerous Type
CVE-2023-36847		 CWE-434 High
Public exploit available
Exploited
 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S4, 21.4R3-S5, 22.1R3-S3, 22.2R3-S1, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3, 23.2R1 18.08.2023 SB2023081879
#VU79689 - Unrestricted Upload of File with Dangerous Type
CVE-2023-36846		 CWE-434 High
Public exploit available
Exploited
 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S4, 21.4R3-S5, 22.1R3-S3, 22.2R3-S1, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3, 23.2R1 18.08.2023 SB2023081879
#VU79688 - Improper input validation
CVE-2023-36845		 CWE-20 High
Public exploit available
Exploited
 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S4, 21.4R3-S5, 22.1R3-S3, 22.2R3-S1, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3, 23.2R1 18.08.2023 SB2023081879
#VU79687 - Improper input validation
CVE-2023-36844		 CWE-20 High
Public exploit available
Exploited
 20.4R3-S8, 21.2R3-S6, 21.3R3-S5, 21.4R3-S4, 21.4R3-S5, 22.1R3-S3, 22.2R3-S1, 22.2R3-S2, 22.3R2-S2, 22.3R3, 22.4R2-S1, 22.4R3, 23.2R1 18.08.2023 SB2023081879
#VU78283 - Improper input validation
CVE-2023-36848		 CWE-20 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.3R3-S8, 19.4R3-S12, 20.2R3-S8, 20.4R3-S7, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S4, 22.1R3-S3, 22.2R3-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.1R1 16.07.2023 SB2023071611
#VU78282 - Improper input validation
CVE-2023-36850		 CWE-20 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.4R3-S12, 20.2R3-S7, 20.4R3-S7, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R3, 22.3R2, 22.3R3, 22.4R2, 23.1R1 16.07.2023 SB2023071610
#VU78279 - Out-of-bounds read
CVE-2023-36838		 CWE-125 Low
No
No
 20.2R3-S7, 20.4R3-S6, 21.1R3-S5, 21.2R3-S4, 21.3R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R3, 22.3R2, 22.4R1-S1, 22.4R2, 23.1R1 16.07.2023 SB2023071607
#VU78275 - Improper Handling of Exceptional Conditions
CVE-2023-36849		 CWE-755 Medium
No
No
 21.4R3-S3, 22.1R3-S3, 22.2R2-S1, 22.2R3, 22.3R2, 22.4R1 16.07.2023 SB2023071603
#VU78274 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-36832		 CWE-754 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.3R3-S8, 19.4R3-S12, 20.2R3-S8, 20.4R3-S7, 21.1R3-S5, 21.2R3-S5, 21.3R3-S4, 21.4R3-S3, 22.1R3-S2, 22.2R3, 22.3R2-S1, 22.3R3, 22.4R1-S2, 22.4R2, 23.1R1 16.07.2023 SB2023071602
#VU75140 - Improper Authentication
CVE-2023-28963		 CWE-287 Medium
No
No
 19.4R3-S11, 20.2R3-S7, 20.4R3-S6, 21.2R3-S4, 21.3R3-S3, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1 14.04.2023 SB2023041455
#VU75139 - Improper Authentication
CVE-2023-28962		 CWE-287 Medium
No
No
 19.4R3-S11, 20.2R3-S7, 20.4R3-S6, 21.2R3-S4, 21.3R3-S3, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1 14.04.2023 SB2023041455
#VU75136 - Uncontrolled Memory Allocation
CVE-2023-28968		 CWE-789 Medium
No
No
 19.4R3-S11, 20.2R3-S7, 20.4R3-S6, 21.1R3-S5, 21.2R3-S4, 21.3R3-S3, 21.4R3-S3, 22.1R3-S1, 22.2R2-S1, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1 14.04.2023 SB2023041449
#VU75109 - Improper Check or Handling of Exceptional Conditions
CVE-2023-28970		 CWE-703 Medium
No
No
 21.2R3-S4, 21.4R3-S3, 22.1R3-S1, 22.2R2-S2, 22.2R3, 22.3R1-S2, 22.3R2, 22.4R1-S1, 22.4R2, 23.1R1 13.04.2023 SB2023041359
#VU18088 - NULL Pointer Dereference
CVE-2017-7655		 CWE-476 Medium
No
No
 19.1R3-S10, 19.2R3-S7, 19.3R3-S8, 19.4R3-S11, 20.2R3-S7, 20.3R3-S6, 20.4R3-S7, 21.1R3-S4, 21.2R3-S5, 21.3R3-S4, 21.4R3-S4, 22.1R3, 22.2R3, 22.3R2, 22.4R1 28.03.2019 SB2019032712
SB2023100601


Showing elements 121 - 140 out of 138