Known vulnerabilities in Splunk Enterprise 9.2.4 - page 7

Version: 9.2.4
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 155
Public exploits: 4
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 9.2.4 Splunk Enterprise 9.2.4 is affected by 155 vulnerabilities: 14 high, 72 medium, 69 low Critical High Medium Low

Vulnerabilities (155)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154112 - Improper input validation
CVE-2026-76277
CWE-20 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154113 - Authorization Bypass Through User-Controlled Key
CVE-2026-76278
CWE-639 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154106 - Inefficient Algorithmic Complexity
CVE-2026-76271
CWE-407 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154108 - Improper input validation
CVE-2026-76273
CWE-20 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154109 - Server-Side Request Forgery (SSRF)
CVE-2026-76274
CWE-918 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154110 - Improper Authorization
CVE-2026-76275
CWE-285 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU154111 - Insecure Default Initialization of Resource
CVE-2026-76276
CWE-1188 Low
No
No
9.4.15, 10.0.10, 10.2.7, 10.4.3 12.10.2026 SB2026101252
SB2026101253
#VU106069 - Improper Access Control
CVE-2025-20230
CWE-284 Medium
No
No
9.1.8, 9.2.5, 9.3.3, 9.4.1 26.03.2025 SB2025032671
#VU106068 - Information Exposure Through Log Files
CVE-2025-20231
CWE-532 Medium
No
No
9.1.8, 9.2.5, 9.3.3, 9.4.1 26.03.2025 SB2025032670
#VU106067 - Improper input validation
CVE-2025-20227
CWE-20 Low
No
No
9.1.8, 9.2.5, 9.3.3, 9.4.1 26.03.2025 SB2025032668
#VU106066 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20226
CWE-200 Medium
No
No
9.1.8, 9.2.5, 9.3.3, 9.4.1 26.03.2025 SB2025032668
#VU106065 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20232
CWE-200 Medium
No
No
9.1.8, 9.2.5, 9.3.3 26.03.2025 SB2025032668
#VU106064 - Cross-Site Request Forgery (CSRF)
CVE-2025-20228
CWE-352 Medium
No
No
9.1.8, 9.2.5, 9.3.3 26.03.2025 SB2025032668
#VU106063 - Unrestricted Upload of File with Dangerous Type
CVE-2025-20229
CWE-434 Medium
No
No
9.1.8, 9.2.5, 9.3.3 26.03.2025 SB2025032668
#VU105459 - Resource exhaustion
CVE-2025-22869
CWE-400 Low
No
No
9.1.9, 9.2.6, 9.3.4, 9.4.2 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU97217 - Resource exhaustion
CVE-2024-34158
CWE-400 Medium
No
No
9.1.9, 9.2.6, 9.3.4, 9.4.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155
CWE-400 Medium
No
No
9.1.9, 9.2.6, 9.3.4, 9.4.2 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU95571 - Command injection
CVE-2024-6923
CWE-77 Medium
No
No
9.1.8, 9.2.5, 9.3.3, 9.4.1 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU93850 - Resource exhaustion
CVE-2024-24791
CWE-400 Medium
No
No
9.1.9, 9.2.6, 9.3.4, 9.4.2 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more


Showing elements 121 - 140 out of 155