Known vulnerabilities in Splunk Enterprise 9.1.3 - page 7

Version: 9.1.3
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 226
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.1.3 Splunk Enterprise 9.1.3 is affected by 226 vulnerabilities: 11 high, 136 medium, 79 low Critical High Medium Low

Vulnerabilities (226)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
9.1.7, 9.2.4, 9.3.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97689 -
CVE-2024-6531
Medium
No
No
9.1.7, 9.2.4, 9.3.2 25.09.2024 SB2024092513
SB2024121139
SB2025031910
and 7 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Public exploit available
No
9.1.6, 9.2.3, 9.3.1 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 189 more
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285
CWE-311 Medium
No
No
9.1.6, 9.2.3, 9.3.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83254 - Improper input validation
CVE-2023-45284
CWE-20 Low
No
No
9.1.6, 9.2.3, 9.3.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 18 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318
CWE-79 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531
CWE-295 Medium
No
No
9.1.7, 9.2.4, 9.3.2 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU50779 - Reachable Assertion
CVE-2021-27212
CWE-617 Medium
No
No
9.1.6, 9.2.3, 9.3.1 17.02.2021 SB2021021717
SB2021022225
SB2021022613
and 13 more
#VU19562 - Improper Authorization
CVE-2019-13565
CWE-285 Low
No
No
9.1.6, 9.2.3, 9.3.1 30.07.2019 SB2019073001
SB2019092405
SB2019092417
and 5 more
#VU19561 - Improper Authorization
CVE-2019-13057
CWE-285 Low
No
No
9.1.6, 9.2.3, 9.3.1 30.07.2019 SB2019073001
SB2019092405
SB2019092417
and 2 more
#VU16671 - Stack-based buffer overflow
CVE-2017-17740
CWE-121 Low
No
No
9.1.6, 9.2.3, 9.3.1 24.12.2018 SB2019092405
SB2019092417
SB2018051303
and 1 more
#VU31918 - Improper Initialization
CVE-2017-14159
CWE-665 Medium
No
No
9.1.6, 9.2.3, 9.3.1 05.09.2017 SB2018051302
SB2024101547


Showing elements 121 - 140 out of 226