Known vulnerabilities in Splunk DB Connect

Software CPE: cpe:2.3:a:splunk:splunk_db_connect:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk DB Connect Splunk DB Connect is affected by 9 known vulnerabilities: 1 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121159 - Resource exhaustion
CVE-2025-15284
CWE-400 Medium
No
No
4.2.0 12.01.2026 SB2026011229
SB2026011326
SB2026011926
and 38 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441
CWE-409 Medium
No
No
4.2.0 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875
CWE-79 Medium
No
No
4.0.0 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU98649 - Improper input validation
CVE-2024-21272
CWE-20 Medium
No
No
4.0.0 15.10.2024 SB20241015212
SB2025042937
SB2025070810
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801
CWE-1321 Medium
No
No
4.0.0 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-38999
CWE-1321 High
No
No
4.0.0 13.09.2024 SB2024091339
SB2024091626
SB20241015165
and 13 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
4.0.0 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88674 - Improper input validation
CVE-2024-21090
CWE-20 Medium
No
No
4.0.0 17.04.2024 SB20240417102
SB2025042937
SB2025070810
#VU82349 - Cryptographic Issues
CVE-2023-5363
CWE-310 Low
No
No
4.0.0 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more