Known vulnerabilities in Splunk Enterprise 9.1.3 - page 10

Version: 9.1.3
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 226
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.1.3 Splunk Enterprise 9.1.3 is affected by 226 vulnerabilities: 11 high, 136 medium, 79 low Critical High Medium Low

Vulnerabilities (226)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98536 - Improper Access Control
CVE-2024-45735
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
SB2024101515
#VU98535 - Resource exhaustion
CVE-2024-45736
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98534 - Cross-Site Request Forgery (CSRF)
CVE-2024-45737
CWE-352 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98533 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45738
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98531 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45739
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45740
CWE-79 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45741
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.0 15.10.2024 SB2024101514
#VU93572 - NULL Pointer Dereference
CVE-2024-36982
CWE-476 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93569 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-36985
CWE-94 High
Public exploit available
Exploited
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93568 - Authorization Bypass Through User-Controlled Key
CVE-2024-36986
CWE-639 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93567 - Unrestricted Upload of File with Dangerous Type
CVE-2024-36987
CWE-434 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93566 - Improper Access Control
CVE-2024-36989
CWE-284 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93554 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-36990
CWE-835 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36991
CWE-22 Medium
Public exploit available
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36992
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36993
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36994
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93549 - Permissions, Privileges, and Access Controls
CVE-2024-36995
CWE-264 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93548 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36996
CWE-200 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36997
CWE-79 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165


Showing elements 181 - 200 out of 226