Known vulnerabilities in Splunk Enterprise - page 11

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98541 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-45731
CWE-22 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98539 - Missing Authorization
CVE-2024-45732
CWE-862 Low
No
No
9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98538 - Deserialization of Untrusted Data
CVE-2024-45733
CWE-502 Medium
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98537 - Improper Access Control
CVE-2024-45734
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98536 - Improper Access Control
CVE-2024-45735
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
SB2024101515
#VU98535 - Resource exhaustion
CVE-2024-45736
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98534 - Cross-Site Request Forgery (CSRF)
CVE-2024-45737
CWE-352 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98533 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45738
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98531 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45739
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45740
CWE-79 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45741
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.0 15.10.2024 SB2024101514
#VU93553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36991
CWE-22 Medium
Available
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36992
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36993
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36994
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93549 - Permissions, Privileges, and Access Controls
CVE-2024-36995
CWE-264 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93548 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36996
CWE-200 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36997
CWE-79 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU50392 - Double Free
CVE-2020-36225
CWE-415 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50396 - Type confusion
CVE-2020-36229
CWE-843 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more


Showing elements 201 - 220 out of 472