Known vulnerabilities in Splunk Enterprise 9.1.3 - page 9
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.1.3
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
226
Public exploits:
13
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (226)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98559 - Improper input validation CVE-2015-3276 |
CWE-20 | Medium | 9.1.6, 9.2.3, 9.3.1 | 15.10.2024 |
SB2015120705 SB2024101547 SB2017020113 |
||
| #VU98558 - Improper Certificate Validation CVE-2020-15719 |
CWE-295 | Medium | 9.1.6, 9.2.3, 9.3.1 | 15.10.2024 |
SB2024101547 SB2020082927 SB2019110531 |
||
| #VU98541 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-45731 |
CWE-22 | Medium | 9.1.6, 9.2.3, 9.3.1 | 15.10.2024 |
SB2024101514 |
||
| #VU98538 - Deserialization of Untrusted Data CVE-2024-45733 |
CWE-502 | Medium | 9.1.6, 9.2.3 | 15.10.2024 |
SB2024101514 |
||
| #VU98537 - Improper Access Control CVE-2024-45734 |
CWE-284 | Low | 9.1.6, 9.2.3 | 15.10.2024 |
SB2024101514 |
||
| #VU87538 - Resource exhaustion CVE-2024-28180 |
CWE-400 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 14.03.2024 |
SB2024031446 SB2024031447 SB2024031448 and 106 more |
||
| #VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24786 |
CWE-835 | Medium | 9.1.6, 9.2.3, 9.3.1 | 11.03.2024 |
SB2024031115 SB2024031435 SB2024031555 and 134 more |
||
| #VU86049 - Insufficient Verification of Data Authenticity CVE-2024-24557 |
CWE-345 | Medium | 9.1.6, 9.2.3, 9.3.1 | 02.02.2024 |
SB2024020242 SB2024032237 SB2024032712 and 18 more |
||
| #VU84507 - Resource exhaustion CVE-2023-47108 |
CWE-400 | Medium | 9.1.6, 9.2.3, 9.3.1 | 18.12.2023 |
SB2023121825 SB2023122137 SB2024010436 and 55 more |
||
| #VU83546 - Resource exhaustion CVE-2023-45142 |
CWE-400 | Medium | 9.1.6, 9.2.3, 9.3.1 | 29.11.2023 |
SB2023112912 SB2023112913 SB2023112949 and 54 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 9.1.6, 9.2.3, 9.3.1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU50389 - Integer underflow CVE-2020-36221 |
CWE-191 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011828 and 15 more |
||
| #VU50390 - Reachable Assertion CVE-2020-36222 |
CWE-617 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011829 and 14 more |
||
| #VU50391 - Double Free CVE-2020-36223 |
CWE-415 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU50392 - Double Free CVE-2020-36225 |
CWE-415 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU50393 - Resource Management Errors CVE-2020-36226 |
CWE-399 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU50396 - Type confusion CVE-2020-36229 |
CWE-843 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 15 more |
||
| #VU50398 - Release of invalid pointer or reference CVE-2020-36224 |
CWE-763 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU48143 - NULL Pointer Dereference CVE-2020-25692 |
CWE-476 | Medium | 9.1.6, 9.2.3, 9.3.1 | 04.11.2020 |
SB2020110407 SB2020110408 SB2020121028 and 10 more |
||
| #VU27445 - Resource Management Errors CVE-2020-12243 |
CWE-399 | Medium | 9.1.6, 9.2.3, 9.3.1 | 29.04.2020 |
SB2020042921 SB2020043001 SB2020050624 and 10 more |
Showing elements 161 - 180 out of 226