Known vulnerabilities in Splunk Enterprise 9.1.3 - page 5
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.1.3
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
226
Public exploits:
13
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (226)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119117 - Improper Output Neutralization for Logs CVE-2025-20384 |
CWE-117 | Medium | 9.2.10, 9.3.8, 9.4.6, 10.0.1 | 04.12.2025 |
SB2025120404 |
||
| #VU119116 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20382 |
CWE-601 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU118468 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20378 |
CWE-601 | Low | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU118466 - Improper Access Control CVE-2025-20379 |
CWE-284 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU112573 - Exposure of sensitive information to an unauthorized actor CVE-2025-20325 |
CWE-200 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112570 - Improper Access Control CVE-2025-20300 |
CWE-284 | Low | 9.1.9, 9.2.6, 9.3.5, 9.4.2 | 09.07.2025 |
SB2025070908 |
||
| #VU112569 - Improper Access Control CVE-2025-20324 |
CWE-284 | Medium | 9.1.10, 9.2.7, 9.3.5, 9.4.2 | 09.07.2025 |
SB2025070910 |
||
| #VU112567 - Cross-Site Request Forgery (CSRF) CVE-2025-20322 |
CWE-352 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112565 - Cross-Site Request Forgery (CSRF) CVE-2025-20321 |
CWE-352 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112563 - External Control of File Name or Path CVE-2025-20320 |
CWE-73 | Medium | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-20319 |
CWE-78 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112106 - Memory corruption CVE-2025-52999 |
CWE-119 | Medium | 9.2.8, 9.2.9, 9.3.6, 9.3.7, 9.4.4, 9.4.5, 10.0.1 | 02.07.2025 |
SB2025070257 SB2025070261 SB2025070262 and 43 more |
||
| #VU110073 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20297 |
CWE-79 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 02.06.2025 |
SB2025060246 |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU101816 - Insufficient Verification of Data Authenticity CVE-2024-53259 |
CWE-345 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 17.12.2024 |
SB2024121770 SB2024121771 SB2025012135 and 5 more |
||
| #VU101777 - Improper Authorization CVE-2024-45337 |
CWE-285 | Medium | 9.1.9, 9.2.6, 9.2.8, 9.3.4, 9.3.6, 9.4.2, 9.4.4, 10.0.1 | 13.12.2024 |
SB2024121332 SB2024121333 SB2024121334 and 93 more |
||
| #VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-35255 |
CWE-362 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 11.06.2024 |
SB20240611248 SB2024091320 SB2024091965 and 15 more |
||
| #VU91159 - Improper input validation CVE-2024-24789 |
CWE-20 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 78 more |
||
| #VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31159 |
CWE-22 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 08.03.2023 |
SB2023030823 SB2023030915 SB2023042635 and 15 more |
Showing elements 81 - 100 out of 226