Known vulnerabilities in Splunk Enterprise 9.2.4 - page 4
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.2.4
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
155
Public exploits:
4
Known exploited (KEV):
1
Vulnerabilities by Severity
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (155)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126413 - Insecure Temporary File CVE-2026-20204 |
CWE-377 | Low | 9.3.11, 9.4.10, 10.0.5, 10.2.1 | 17.04.2026 |
SB2026031315 |
||
| #VU123097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-20137 |
CWE-22 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.3 | 19.02.2026 |
SB2026021959 |
||
| #VU123096 - Unprotected Storage of Credentials CVE-2026-20138 |
CWE-256 | Medium | 9.2.11, 9.3.9, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021961 |
||
| #VU123095 - Resource exhaustion CVE-2026-20139 |
CWE-400 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.2 | 19.02.2026 |
SB2026021964 |
||
| #VU123093 - Cleartext Storage of Sensitive Information CVE-2026-20142 |
CWE-312 | Medium | 9.2.11, 9.3.9, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021961 |
||
| #VU123092 - Uncontrolled Search Path Element CVE-2026-20140 |
CWE-427 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021960 |
||
| #VU123090 - Information Exposure Through Log Files CVE-2026-20144 |
CWE-532 | Medium | 9.2.11, 9.3.8, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021962 |
||
| #VU120254 - Improper Handling of Length Parameter Inconsistency CVE-2025-14847 |
CWE-130 | High | 9.2.12, 9.3.9, 9.4.8, 10.0.3, 10.2.0 | 23.12.2025 |
SB2025122318 SB2026011607 SB2026012973 and 9 more |
||
| #VU119140 - Improper Access Control CVE-2025-20383 |
CWE-284 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119139 - Improper input validation CVE-2025-20389 |
CWE-20 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119120 - Server-Side Request Forgery (SSRF) CVE-2025-20388 |
CWE-918 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119119 - Incorrect Permission Assignment for Critical Resource CVE-2025-20386 |
CWE-732 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20385 |
CWE-79 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU118189 - Improper input validation CVE-2025-58188 |
CWE-20 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 117 more |
||
| #VU118188 - Allocation of Resources Without Limits or Throttling CVE-2025-58186 |
CWE-770 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025120304 and 19 more |
||
| #VU118181 - Resource exhaustion CVE-2025-58187 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110706 SB2025110731 SB2025112832 and 23 more |
||
| #VU116213 - Out-of-bounds write CVE-2025-9230 |
CWE-787 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 01.10.2025 |
SB2025100119 SB2025100132 SB2025100133 and 108 more |
||
| #VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27210 |
CWE-22 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 22.07.2025 |
SB2025072233 SB2025082103 SB2025091525 and 6 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 31 more |
Showing elements 61 - 80 out of 155