Known vulnerabilities in Splunk Enterprise 9.2.4 - page 3

Version: 9.2.4
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 155
Public exploits: 4
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.2.4 Splunk Enterprise 9.2.4 is affected by 155 vulnerabilities: 14 high, 72 medium, 69 low Critical High Medium Low

Vulnerabilities (155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120994 - Exposure of sensitive information to an unauthorized actor
CVE-2025-69226
CWE-200 Low
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 06.01.2026 SB2026010643
SB20260216150
SB2026030633
and 8 more
#VU118530 - Cryptographic Issues
CVE-2025-8556
CWE-310 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 14.11.2025 SB2025111412
SB2025111416
SB2025112459
and 3 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU118187 - Resource exhaustion
CVE-2025-58185
CWE-400 Medium
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 117 more
#VU118186 - Improper input validation
CVE-2025-47912
CWE-20 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110731
SB2025120304
and 22 more
#VU118184 - Resource exhaustion
CVE-2025-61723
CWE-400 Medium
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110716
SB2025110717
and 123 more
#VU118183 - Improper Encoding or Escaping of Output
CVE-2025-58189
CWE-116 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110711
SB2025110712
and 125 more
#VU118179 - Resource exhaustion
CVE-2025-61725
CWE-400 Medium
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.11.2025 SB2025110705
SB2025110714
SB2025110715
and 78 more
#VU117430 - Resource exhaustion
CVE-2025-30153
CWE-400 High
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 21.10.2025 SB2025102163
SB2025102164
SB2026031315
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907
CWE-362 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 52 more
#VU114079 - Improper input validation
CVE-2025-47906
CWE-20 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 130 more
#VU112882 - Uncontrolled Recursion
CVE-2025-4565
CWE-674 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 14.07.2025 SB2025071429
SB2025071430
SB2025071431
and 21 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081
CWE-522 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 96 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874
CWE-693 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 18 more
#VU110252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-0913
CWE-59 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.06.2025 SB2025060702
SB2025061002
SB2025061003
and 8 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673
CWE-200 Low
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105461 - Resource exhaustion
CVE-2025-22868
CWE-400 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU96644 - Improper input validation
CVE-2024-7246
CWE-20 Medium
No
No
9.3.10, 9.4.9, 10.0.4, 10.2.1 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more


Showing elements 41 - 60 out of 155