Known vulnerabilities in Splunk Enterprise 8.2.3 - page 9
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
8.2.3
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
199
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (199)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77075 - Improper input validation CVE-2023-22940 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77074 - Uncaught Exception CVE-2023-22941 |
CWE-248 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77071 - Cross-Site Request Forgery (CSRF) CVE-2023-22942 |
CWE-352 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU77069 - Improper input validation CVE-2023-22939 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77068 - Improper Authorization CVE-2023-22938 |
CWE-285 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77067 - Server-Side Request Forgery (SSRF) CVE-2023-22936 |
CWE-918 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77064 - Improper input validation CVE-2023-22935 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77063 - Improper input validation CVE-2023-22934 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77062 - Improper Authorization CVE-2023-22931 |
CWE-285 | Low | 8.1.13, 8.2.10 | 07.06.2023 |
SB2023060728 |
||
| #VU77061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22933 |
CWE-79 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU76920 - Improper Output Neutralization for Logs CVE-2023-32712 |
CWE-117 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76919 - Exposure of sensitive information to an unauthorized actor CVE-2023-32710 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76918 - Improper Check for Unusual or Exceptional Conditions CVE-2023-32716 |
CWE-754 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76917 - Improper Access Control CVE-2023-32717 |
CWE-284 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76916 - Improper Authorization CVE-2023-32709 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76915 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-32708 |
CWE-113 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76914 - Improper Authorization CVE-2023-32707 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76913 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-32706 |
CWE-611 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-32711 |
CWE-79 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU72379 - Improper input validation CVE-2023-22937 |
CWE-20 | Low | 8.1.13, 8.2.10, 9.0.4 | 20.02.2023 |
SB2023022005 |
Showing elements 161 - 180 out of 199