Known vulnerabilities in Splunk Enterprise 9.2.4 - page 6
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.2.4
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
133
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (133)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112573 - Exposure of sensitive information to an unauthorized actor CVE-2025-20325 |
CWE-200 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112570 - Improper Access Control CVE-2025-20300 |
CWE-284 | Low | 9.1.9, 9.2.6, 9.3.5, 9.4.2 | 09.07.2025 |
SB2025070908 |
||
| #VU112569 - Improper Access Control CVE-2025-20324 |
CWE-284 | Medium | 9.1.10, 9.2.7, 9.3.5, 9.4.2 | 09.07.2025 |
SB2025070910 |
||
| #VU112567 - Cross-Site Request Forgery (CSRF) CVE-2025-20322 |
CWE-352 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112565 - Cross-Site Request Forgery (CSRF) CVE-2025-20321 |
CWE-352 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112563 - External Control of File Name or Path CVE-2025-20320 |
CWE-73 | Medium | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-20319 |
CWE-78 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU112106 - Memory corruption CVE-2025-52999 |
CWE-119 | Medium | 9.2.8, 9.2.9, 9.3.6, 9.3.7, 9.4.4, 9.4.5, 10.0.1 | 02.07.2025 |
SB2025070257 SB2025070261 SB2025070262 and 43 more |
||
| #VU110073 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20297 |
CWE-79 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 02.06.2025 |
SB2025060246 |
||
| #VU107596 - Heap-based Buffer Overflow CVE-2025-32415 |
CWE-122 | High | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 17.04.2025 |
SB2025041758 SB2025041880 SB2025042531 and 56 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU101816 - Insufficient Verification of Data Authenticity CVE-2024-53259 |
CWE-345 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 17.12.2024 |
SB2024121770 SB2024121771 SB2025012135 and 5 more |
||
| #VU101777 - Improper Authorization CVE-2024-45337 |
CWE-285 | Medium | 9.1.9, 9.2.6, 9.2.8, 9.3.4, 9.3.6, 9.4.2, 9.4.4, 10.0.1 | 13.12.2024 |
SB2024121332 SB2024121333 SB2024121334 and 93 more |
||
| #VU97574 - Uncontrolled Recursion CVE-2024-7254 |
CWE-674 | Medium | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 19.09.2024 |
SB2024091904 SB2024100103 SB2024101050 and 90 more |
||
| #VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-35255 |
CWE-362 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 11.06.2024 |
SB20240611248 SB2024091320 SB2024091965 and 15 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU91159 - Improper input validation CVE-2024-24789 |
CWE-20 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 78 more |
||
| #VU87538 - Resource exhaustion CVE-2024-28180 |
CWE-400 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 14.03.2024 |
SB2024031446 SB2024031447 SB2024031448 and 106 more |
||
| #VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31159 |
CWE-22 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 08.03.2023 |
SB2023030823 SB2023030915 SB2023042635 and 15 more |
||
| #VU70097 - Heap-based Buffer Overflow CVE-2015-5237 |
CWE-122 | High | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 10.12.2022 |
SB2017092512 SB2023011801 SB2023042744 and 7 more |
Showing elements 101 - 120 out of 133