Known vulnerabilities in Splunk Enterprise 9.4.15
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Version:
9.4.15
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
16
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU156984 - Improper Access Control CVE-2026-76299 |
CWE-284 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156985 - Improper control of a resource through its lifetime CVE-2026-76300 |
CWE-664 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156986 - Protection Mechanism Failure CVE-2026-76301 |
CWE-693 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156987 - Improper Neutralization CVE-2026-76302 |
CWE-707 | High | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156971 - Authorization Bypass Through User-Controlled Key CVE-2026-76287 |
CWE-639 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156972 - Resource exhaustion CVE-2026-76288 |
CWE-400 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156973 - Allocation of Resources Without Limits or Throttling CVE-2026-76289 |
CWE-770 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156974 - Resource exhaustion CVE-2026-76290 |
CWE-400 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156975 - Improper Access Control CVE-2026-76291 |
CWE-284 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156976 - Missing Authorization CVE-2026-76292 |
CWE-862 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156977 - Improper Control of Generation of Code ('Code Injection') CVE-2026-76293 |
CWE-94 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156978 - Missing Authorization CVE-2026-76294 |
CWE-862 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156979 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76295 |
CWE-943 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156980 - Missing Authorization CVE-2026-76296 |
CWE-862 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156981 - Cross-Site Request Forgery (CSRF) CVE-2026-76297 |
CWE-352 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156982 - Use of Hard-coded Cryptographic Key CVE-2026-76298 |
CWE-321 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |