Known vulnerabilities in Splunk Enterprise 9.1.3 - page 12
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.1.3
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
248
Public exploits:
13
Known exploited (KEV):
3
Vulnerabilities by Severity
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (248)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU154112 - Improper input validation CVE-2026-76277 |
CWE-20 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154113 - Authorization Bypass Through User-Controlled Key CVE-2026-76278 |
CWE-639 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154115 - Incorrect Permission Assignment for Critical Resource CVE-2026-76280 |
CWE-732 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154099 - Incorrect Authorization CVE-2026-76264 |
CWE-863 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154101 - Improper Privilege Management CVE-2026-76266 |
CWE-269 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154102 - Improper Output Neutralization for Logs CVE-2026-76267 |
CWE-117 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154103 - Missing Authentication for Critical Function CVE-2026-76268 |
CWE-306 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154104 - Authorization Bypass Through User-Controlled Key CVE-2026-76269 |
CWE-639 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154105 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76270 |
CWE-89 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154106 - Inefficient Algorithmic Complexity CVE-2026-76271 |
CWE-407 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154108 - Improper input validation CVE-2026-76273 |
CWE-20 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154109 - Server-Side Request Forgery (SSRF) CVE-2026-76274 |
CWE-918 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154110 - Improper Authorization CVE-2026-76275 |
CWE-285 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154111 - Insecure Default Initialization of Resource CVE-2026-76276 |
CWE-1188 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU83219 - Deserialization of Untrusted Data CVE-2023-39410 |
CWE-502 | Medium | 9.0.9, 9.1.4, 9.2.1 | 16.11.2023 |
SB2023111614 SB2023112014 SB2023112410 and 43 more |
||
| #VU82454 - Allocation of Resources Without Limits or Throttling CVE-2023-43642 |
CWE-770 | Medium | 9.0.9, 9.1.4, 9.2.1 | 26.10.2023 |
SB2023102621 SB2023102628 SB2023103020 and 63 more |
||
| #VU77362 - Resource exhaustion CVE-2023-34455 |
CWE-400 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 48 more |
||
| #VU77361 - Integer overflow CVE-2023-34454 |
CWE-190 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 39 more |
||
| #VU77359 - Integer overflow CVE-2023-34453 |
CWE-190 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 40 more |
||
| #VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425 |
CWE-22 | Low | 8.2.12, 9.0.6, 9.0.9, 9.1.1, 9.1.4, 9.2.1 | 15.04.2021 |
SB2021041510 SB2021081922 SB2021093016 and 122 more |
Showing elements 221 - 240 out of 248