Known vulnerabilities in Splunk Enterprise - page 10
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98559 - Improper input validation CVE-2015-3276 |
CWE-20 | Medium | 9.1.6, 9.2.3, 9.3.1 | 15.10.2024 |
SB2015120705 SB2024101547 SB2017020113 |
||
| #VU98558 - Improper Certificate Validation CVE-2020-15719 |
CWE-295 | Medium | 9.1.6, 9.2.3, 9.3.1 | 15.10.2024 |
SB2024101547 SB2020082927 SB2019110531 |
||
| #VU92262 - Exposure of sensitive information to an unauthorized actor CVE-2024-37891 |
CWE-200 | Low | 9.1.6, 9.2.3, 9.3.1 | 19.06.2024 |
SB2024061955 SB20240625146 SB2024062605 and 193 more |
||
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 9.1.6, 9.2.3, 9.3.1 | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 116 more |
||
| #VU87538 - Resource exhaustion CVE-2024-28180 |
CWE-400 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 14.03.2024 |
SB2024031446 SB2024031447 SB2024031448 and 106 more |
||
| #VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-24786 |
CWE-835 | Medium | 9.1.6, 9.2.3, 9.3.1 | 11.03.2024 |
SB2024031115 SB2024031435 SB2024031555 and 134 more |
||
| #VU86049 - Insufficient Verification of Data Authenticity CVE-2024-24557 |
CWE-345 | Medium | 9.1.6, 9.2.3, 9.3.1 | 02.02.2024 |
SB2024020242 SB2024032237 SB2024032712 and 18 more |
||
| #VU84507 - Resource exhaustion CVE-2023-47108 |
CWE-400 | Medium | 9.1.6, 9.2.3, 9.3.1 | 18.12.2023 |
SB2023121825 SB2023122137 SB2024010436 and 55 more |
||
| #VU83546 - Resource exhaustion CVE-2023-45142 |
CWE-400 | Medium | 9.1.6, 9.2.3, 9.3.1 | 29.11.2023 |
SB2023112912 SB2023112913 SB2023112949 and 54 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 9.1.6, 9.2.3, 9.3.1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 649 more |
||
| #VU77252 - NULL Pointer Dereference CVE-2023-2953 |
CWE-476 | Medium | 9.1.6, 9.2.3, 9.3.1 | 13.06.2023 |
SB2023061366 SB2023061417 SB2023061418 and 59 more |
||
| #VU71642 - Incorrect Regular Expression CVE-2022-42969 |
CWE-185 | Medium | 9.1.6, 9.2.3, 9.3.1 | 30.01.2023 |
SB2023013033 SB2023013037 SB2023021338 and 11 more |
||
| #VU63343 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-29155 |
CWE-89 | High | 9.1.6, 9.2.3, 9.3.1 | 17.05.2022 |
SB2022051725 SB2022051731 SB2022051919 and 27 more |
||
| #VU50389 - Integer underflow CVE-2020-36221 |
CWE-191 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011828 and 15 more |
||
| #VU50390 - Reachable Assertion CVE-2020-36222 |
CWE-617 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011829 and 14 more |
||
| #VU50391 - Double Free CVE-2020-36223 |
CWE-415 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU50393 - Resource Management Errors CVE-2020-36226 |
CWE-399 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU50398 - Release of invalid pointer or reference CVE-2020-36224 |
CWE-763 | Medium | 9.1.6, 9.2.3, 9.3.1 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021052415 and 13 more |
||
| #VU48143 - NULL Pointer Dereference CVE-2020-25692 |
CWE-476 | Medium | 9.1.6, 9.2.3, 9.3.1 | 04.11.2020 |
SB2020110407 SB2020110408 SB2020121028 and 10 more |
||
| #VU27445 - Resource Management Errors CVE-2020-12243 |
CWE-399 | Medium | 9.1.6, 9.2.3, 9.3.1 | 29.04.2020 |
SB2020042921 SB2020043001 SB2020050624 and 10 more |
Showing elements 181 - 200 out of 472