Known vulnerabilities in IT Service Intelligence (ITSI)

Known vulnerabilities in IT Service Intelligence (ITSI)

Vendor: Splunk Inc.

Software: IT Service Intelligence (ITSI)

Software CPE: cpe:2.3:a:splunk:itsi:*:*:*:*:*:*:*:*

Website: https://www.splunk.com/

Total vulnerabilities: 13

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU118189 - Improper input validation CVE-2025-58188	CWE-20	Medium	No	No	4.21.2	07.11.2025	SB2025110705 SB2025110716 SB2025110717 and 110 more
#VU118184 - Resource exhaustion CVE-2025-61723	CWE-400	Medium	No	No	4.21.2	07.11.2025	SB2025110705 SB2025110716 SB2025110717 and 118 more
#VU118181 - Resource exhaustion CVE-2025-58187	CWE-400	Medium	No	No	4.21.2	07.11.2025	SB2025110706 SB2025110731 SB2025112832 and 23 more
#VU118179 - Resource exhaustion CVE-2025-61725	CWE-400	Medium	No	No	4.21.2	07.11.2025	SB2025110705 SB2025110714 SB2025110715 and 76 more
#VU114761 - Resource exhaustion CVE-2025-58057	CWE-400	Medium	No	No	4.21.2	03.09.2025	SB2025090340 SB2025090949 SB2025101530 and 45 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056	CWE-444	Medium	No	No	4.21.2	03.09.2025	SB2025090340 SB2025090949 SB20251008161 and 38 more
#VU114341 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-4674	CWE-78	High	No	No	4.21.2	21.08.2025	SB2025082138 SB2025082164 SB2025082165 and 19 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-47907	CWE-362	Low	No	No	4.21.2	14.08.2025	SB2025081423 SB2025081424 SB2025081425 and 50 more
#VU110253 - Protection Mechanism Failure CVE-2025-22874	CWE-693	Low	No	No	4.21.2	07.06.2025	SB2025060702 SB2025061002 SB2025081114 and 16 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871	CWE-444	Medium	No	No	4.21.2	05.04.2025	SB2025040507 SB2025040508 SB2025040739 and 109 more
#VU103770 - Improper input validation CVE-2025-24970	CWE-20	Medium	No	No	4.21.2	11.02.2025	SB2025021186 SB202502197190 SB2025030409 and 88 more
#VU80341 - Improper Control of Generation of Code ('Code Injection') CVE-2023-4571	CWE-94	Medium	No	No	4.13.3, 4.15.3	04.09.2023	SB2023090422
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	4.13.3, 4.15.3	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more