Known vulnerabilities in Junos OS Evolved - page 3

Software CPE: cpe:2.3:o:juniper_networks:junos_os_evolved:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Junos OS Evolved Junos OS Evolved is affected by 293 known vulnerabilities: 2 critical, 15 high, 184 medium, 92 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113063 - Missing release of memory after effective lifetime
CVE-2025-52986
CWE-401 Low
No
No
22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R2-EVO, 25.2R1-EVO 18.07.2025 SB2025071850
#VU113059 - Expected Behavior Violation
CVE-2025-52953
CWE-440 Medium
No
No
22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-S3-EVO, 24.4R2-EVO, 25.2R1-EVO 18.07.2025 SB2025071846
#VU113057 - Improper Neutralization of Delimiters
CVE-2025-52989
CWE-140 Low
No
No
22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R2-EVO, 25.2R1-EVO 18.07.2025 SB2025071844
#VU113055 - NULL Pointer Dereference
CVE-2025-52984
CWE-476 Medium
No
No
22.4R3-S7-EVO, 23.2R2-S3-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-EVO 18.07.2025 SB2025071842
#VU113052 - Improper Handling of Length Parameter Inconsistency
CVE-2025-52949
CWE-130 Medium
No
No
22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S5-EVO, 24.2R2-S1-EVO, 24.4R1-S3-EVO, 24.4R2-EVO, 25.2R1-EVO 18.07.2025 SB2025071839
#VU113050 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-52988
CWE-78 Low
No
No
22.4R3-S6-EVO, 23.2R2-S1-EVO, 23.4R1-S2-EVO, 23.4R2-EVO, 24.2R1-EVO 18.07.2025 SB2025071837
#VU113049 - Reachable Assertion
CVE-2025-52964
CWE-617 Medium
No
No
21.4R3-S7-EVO, 22.3R3-S3-EVO, 22.4R3-S5-EVO, 23.2R2-EVO, 23.4R2-EVO, 24.2R1-EVO 18.07.2025 SB2025071836
#VU112735 - Missing Authorization
CVE-2025-52954
CWE-862 Low
No
No
22.2R3-S7-EVO, 22.4R3-S7-EVO, 23.2R2-S4-EVO, 23.4R2-S5-EVO 10.07.2025 SB2025071043
#VU108105 - Improper input validation
CVE-2025-30648
CWE-20 Medium
No
No
22.4R3-S6-EVO, 23.2R2-S3-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-EVO 01.05.2025 SB2025050117
#VU108104 - Improper Handling of Exceptional Conditions
CVE-2025-30652
CWE-755 Low
No
No
21.2R3-S9-EVO, 21.4R3-S10-EVO, 22.2R3-S6-EVO, 22.4R3-S6-EVO, 23.2R2-S3-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-EVO 01.05.2025 SB2025050116
#VU108102 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-21597
CWE-754 Medium
No
No
21.2R3-S6-EVO, 21.3R3-S5-EVO, 21.4R3-S4-EVO, 22.1R3-S3-EVO, 22.2R3-S1-EVO, 22.3R3-EVO, 22.4R3-EVO, 23.2R1-EVO 01.05.2025 SB2025050114
#VU108100 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30654
CWE-200 Low
No
No
22.4R3-S5-EVO 01.05.2025 SB2025050112
#VU107616 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-30655
CWE-754 Low
No
No
21.2R3-S9-EVO, 21.4R3-S8-EVO 18.04.2025 SB2025041877
#VU107433 - Missing release of memory after effective lifetime
CVE-2025-21595
CWE-401 Medium
No
No
21.2R3-S7-EVO, 21.4R3-S4-EVO, 22.2R3-S1-EVO, 22.3R3-S1-EVO, 22.4R3-EVO, 23.2R1-EVO 14.04.2025 SB2025041467
#VU107432 - Signed to Unsigned Conversion Error
CVE-2025-30646
CWE-195 Medium
No
No
21.4R3-S10-EVO, 22.2R3-S6-EVO, 22.4R3-S6-EVO, 23.2R2-S3-EVO, 23.4R2-S4-EVO, 24.2R2-EVO, 24.4R1-EVO 14.04.2025 SB2025041466
#VU107386 - Expired pointer dereference
CVE-2025-30653
CWE-825 Medium
No
No
22.2R3-S4-EVO, 22.4R3-S2-EVO, 23.2R2-EVO, 23.4R2-EVO, 24.2R1-EVO 11.04.2025 SB2025041122
#VU102533 - Out-of-bounds read
CVE-2025-21600
CWE-125 Medium
No
No
21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S3-EVO, 23.4R2-S2-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011032
#VU102532 - Improper Check or Handling of Exceptional Conditions
CVE-2025-21602
CWE-703 Medium
No
No
21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S3-EVO, 23.4R2-S3-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011027
#VU102530 - Out-of-bounds read
CVE-2025-21598
CWE-125 Medium
No
No
21.4R3-S9-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S5-EVO, 23.2R2-S2-EVO, 23.4R2-S1-EVO, 24.2R1-S2-EVO, 24.2R2-EVO, 24.4R1-EVO 10.01.2025 SB2025011026
#VU102521 - Improper control of a resource through its lifetime
CVE-2025-21593
CWE-664 Medium
No
No
21.2R3-S9-EVO, 21.4R3-S10-EVO, 22.2R3-S5-EVO, 22.3R3-S4-EVO, 22.4R3-S3-EVO, 23.2R2-S2-EVO, 23.4R2-EVO, 24.2R1-EVO 10.01.2025 SB2025011008


Showing elements 41 - 60 out of 293