Known vulnerabilities in Splunk Enterprise 9.1.3 - page 8

Version: 9.1.3
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 226
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.1.3 Splunk Enterprise 9.1.3 is affected by 226 vulnerabilities: 11 high, 136 medium, 79 low Critical High Medium Low

Vulnerabilities (226)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98544 - Resource exhaustion
CVE-2023-50658
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101517
SB2024101524
SB2024101547
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195
CWE-254 Low
No
No
9.1.6, 9.2.3, 9.3.1 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU84618 - Improper input validation
CVE-2023-26125
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 20.12.2023 SB2023122044
SB2023122139
SB2024030742
and 6 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Public exploit available
No
9.1.6, 9.2.3, 9.3.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83255 - Improper input validation
CVE-2023-45283
CWE-20 Low
No
No
9.1.6, 9.2.3, 9.3.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 20 more
#VU81964 - Improper input validation
CVE-2023-39323
CWE-20 Medium
No
No
9.0.8, 9.1.3, 9.1.6, 9.2.3, 9.3.1 12.10.2023 SB2023101258
SB2023101259
SB2023101260
and 38 more
#VU80818 - Download of Code Without Integrity Check
CVE-2023-29401
CWE-494 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.09.2023 SB2023091511
SB2023113021
SB2023122139
and 6 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80571 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39320
CWE-94 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 15 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.1 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953
CWE-476 Medium
No
No
9.1.6, 9.2.3, 9.3.1 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU71642 - Incorrect Regular Expression
CVE-2022-42969
CWE-185 Medium
No
No
9.1.6, 9.2.3, 9.3.1 30.01.2023 SB2023013033
SB2023013037
SB2023021338
and 11 more
#VU63343 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-29155
CWE-89 High
No
No
9.1.6, 9.2.3, 9.3.1 17.05.2022 SB2022051725
SB2022051731
SB2022051919
and 27 more
#VU50394 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36227
CWE-835 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50395 - Integer underflow
CVE-2020-36228
CWE-191 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50397 - Reachable Assertion
CVE-2020-36230
CWE-617 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more


Showing elements 141 - 160 out of 226