Known vulnerabilities in Splunk Enterprise 9.1.3 - page 10

Version: 9.1.3
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 248
Public exploits: 13
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.1.3 Splunk Enterprise 9.1.3 is affected by 248 vulnerabilities: 15 high, 137 medium, 96 low Critical High Medium Low

Vulnerabilities (248)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98541 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-45731
CWE-22 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98538 - Deserialization of Untrusted Data
CVE-2024-45733
CWE-502 Medium
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98537 - Improper Access Control
CVE-2024-45734
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98536 - Improper Access Control
CVE-2024-45735
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
SB2024101515
#VU98535 - Resource exhaustion
CVE-2024-45736
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98534 - Cross-Site Request Forgery (CSRF)
CVE-2024-45737
CWE-352 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98533 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45738
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98531 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45739
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45740
CWE-79 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45741
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.0 15.10.2024 SB2024101514
#VU93572 - NULL Pointer Dereference
CVE-2024-36982
CWE-476 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93566 - Improper Access Control
CVE-2024-36989
CWE-284 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93554 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-36990
CWE-835 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36991
CWE-22 Medium
Public exploit available
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36992
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36993
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36994
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93549 - Permissions, Privileges, and Access Controls
CVE-2024-36995
CWE-264 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93548 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36996
CWE-200 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36997
CWE-79 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165


Showing elements 181 - 200 out of 248