Known vulnerabilities in Junos OS 22.2R3-S1

Vendor: Juniper Networks, Inc.
Software: Junos OS
Version: 22.2R3-S1
Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*
Website: https://www.juniper.net/us/en/
Total vulnerabilities: 93
Public exploits: 7
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Junos OS version 22.2R3-S1 Junos OS 22.2R3-S1 is affected by 93 vulnerabilities: 1 critical, 8 high, 70 medium, 14 low Critical High Medium Low

Vulnerabilities (93)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105679 - Permissions, Privileges, and Access Controls
CVE-2025-21590		 CWE-264 High
No
Exploited
 21.2R3-S9, 21.4R3-S10, 22.2R3-S6, 22.4R3-S6, 23.2R2-S3, 23.4R2-S4, 24.2R1-S2, 24.2R2, 24.4R1 12.03.2025 SB2025031279
#VU102533 - Out-of-bounds read
CVE-2025-21600		 CWE-125 Medium
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S5, 23.2R2-S3, 23.4R2-S3, 24.2R1-S2, 24.2R2, 24.4R1 10.01.2025 SB2025011032
#VU102532 - Improper Check or Handling of Exceptional Conditions
CVE-2025-21602		 CWE-703 Medium
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S5, 23.2R2-S3, 23.4R2-S3, 24.2R1-S2, 24.2R2, 24.4R1 10.01.2025 SB2025011027
#VU102523 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21592		 CWE-200 Low
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S2, 23.2R2-S1, 23.4R2, 24.2R1 10.01.2025 SB2025011009
#VU102521 - Improper control of a resource through its lifetime
CVE-2025-21593		 CWE-664 Medium
No
No
 21.2R3-S9, 21.4R3-S10, 22.2R3-S5, 22.3R3-S4, 22.4R3-S3, 23.2R2-S2, 23.4R2, 24.2R1 10.01.2025 SB2025011008
#VU102488 - Improper Handling of Exceptional Conditions
CVE-2025-21596		 CWE-755 Low
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S4, 23.2R2-S3, 23.4R2-S1, 24.2R1 09.01.2025 SB2025010933
#VU98413 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-47494		 CWE-362 Low
No
No
 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S3, 23.2R2-S2, 23.4R2, 24.2R1 11.10.2024 SB2024101139
#VU98410 - Missing release of memory after effective lifetime
CVE-2024-47493		 CWE-401 Medium
No
No
 21.2R3-S7, 21.4R3-S6, 22.1R3-S5, 22.2R3-S3, 22.3R3-S2, 22.4R3, 23.2R2, 23.4R1, 23.4R2, 24.1R1 11.10.2024 SB2024101136
#VU98409 - Improper Validation of Consistency within Input
CVE-2024-39515		 CWE-1288 Medium
No
No
 21.4R3-S8, 22.2R3-S5 11.10.2024 SB2024101135
#VU98407 - Resource exhaustion
CVE-2024-47497		 CWE-400 Medium
No
No
 21.4R3-S7, 22.2R3-S4, 22.3R3-S3, 22.4R3-S2, 23.2R2-S1, 23.4R1-S2, 23.4R2, 24.2R1 11.10.2024 SB2024101134
#VU98406 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-47507		 CWE-754 Medium
No
No
 21.4R3-S6, 22.1R3-S6, 22.2R3-S3, 22.4R3, 23.2R1 11.10.2024 SB2024101133
#VU98404 - Improper Handling of Exceptional Conditions
CVE-2024-39526		 CWE-755 Medium
No
No
 21.2R3-S7, 21.4R3-S6, 22.2R3-S3, 22.4R3, 23.2R2, 23.4R2, 24.2R1 11.10.2024 SB2024101131
#VU98403 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-47503		 CWE-754 Medium
No
No
 21.4R3-S9, 22.2R3-S5 11.10.2024 SB2024101130
#VU98402 - Improper Validation of Specified Type of Input
CVE-2024-47504		 CWE-1287 Medium
No
No
 22.2R3-S5 11.10.2024 SB2024101129
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU56737 - Resource exhaustion
CVE-2016-0747		 CWE-400 High
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU56736 - Use After Free
CVE-2016-0746		 CWE-416 High
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 21.09.2021 SB2016021501
SB2024080137
SB2024080138
and 7 more
#VU24230 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20372		 CWE-444 Medium
Public exploit available
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 13.01.2020 SB2020011323
SB2020011324
SB2020021002
and 10 more
#VU1082 - Permissions, Privileges, and Access Controls
CVE-2016-1247		 CWE-264 Low
Public exploit available
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 26.10.2016 SB2017011106
SB2017011501
SB2017011502
and 10 more
#VU25 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2016-4450		 CWE-829 Medium
No
No
 21.4R3-S8, 22.2R3-S5, 22.3R3-S3, 22.4R3-S4, 23.2R2-S2, 23.4R2-S1, 24.2R1 24.06.2016 SB2016053101
SB2016060202
SB2016060102
and 14 more


Showing elements 1 - 20 out of 93