Known vulnerabilities in Splunk Enterprise - page 10
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112570 - Improper Access Control CVE-2025-20300 |
CWE-284 | Low | 9.1.9, 9.2.6, 9.3.5, 9.4.2 | 09.07.2025 |
SB2025070908 |
||
| #VU112562 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-20319 |
CWE-78 | Low | 9.1.10, 9.2.7, 9.3.5, 9.4.3 | 09.07.2025 |
SB2025070910 |
||
| #VU110073 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20297 |
CWE-79 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 02.06.2025 |
SB2025060246 |
||
| #VU106069 - Improper Access Control CVE-2025-20230 |
CWE-284 | Medium | 9.1.8, 9.2.5, 9.3.3, 9.4.1 | 26.03.2025 |
SB2025032671 |
||
| #VU106068 - Information Exposure Through Log Files CVE-2025-20231 |
CWE-532 | Medium | 9.1.8, 9.2.5, 9.3.3, 9.4.1 | 26.03.2025 |
SB2025032670 |
||
| #VU106067 - Improper input validation CVE-2025-20227 |
CWE-20 | Low | 9.1.8, 9.2.5, 9.3.3, 9.4.1 | 26.03.2025 |
SB2025032668 |
||
| #VU106066 - Exposure of sensitive information to an unauthorized actor CVE-2025-20226 |
CWE-200 | Medium | 9.1.8, 9.2.5, 9.3.3, 9.4.1 | 26.03.2025 |
SB2025032668 |
||
| #VU105459 - Resource exhaustion CVE-2025-22869 |
CWE-400 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 10.03.2025 |
SB2025031011 SB2025031015 SB2025032557 and 108 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU101816 - Insufficient Verification of Data Authenticity CVE-2024-53259 |
CWE-345 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 17.12.2024 |
SB2024121770 SB2024121771 SB2025012135 and 5 more |
||
| #VU97217 - Resource exhaustion CVE-2024-34158 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 76 more |
||
| #VU97215 - Resource exhaustion CVE-2024-34155 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 81 more |
||
| #VU95571 - Command injection CVE-2024-6923 |
CWE-77 | Medium | 9.1.8, 9.2.5, 9.3.3, 9.4.1 | 08.08.2024 |
SB2024080861 SB2024080862 SB2024080863 and 144 more |
||
| #VU93850 - Resource exhaustion CVE-2024-24791 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 07.07.2024 |
SB2024070727 SB2024070728 SB2024070729 and 86 more |
||
| #VU91723 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-35255 |
CWE-362 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 11.06.2024 |
SB20240611248 SB2024091320 SB2024091965 and 15 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU91159 - Improper input validation CVE-2024-24789 |
CWE-20 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 78 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 9.0.9, 9.1.4, 9.1.8, 9.1.9, 9.2.1, 9.2.5, 9.2.6, 9.3.3, 9.3.4, 9.4.1, 9.4.2 | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 117 more |
||
| #VU87538 - Resource exhaustion CVE-2024-28180 |
CWE-400 | Medium | 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 | 14.03.2024 |
SB2024031446 SB2024031447 SB2024031448 and 106 more |
||
| #VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31159 |
CWE-22 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 08.03.2023 |
SB2023030823 SB2023030915 SB2023042635 and 15 more |
Showing elements 181 - 200 out of 570