Known vulnerabilities in Splunk Enterprise - page 13
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85686 - Improper Access Control CVE-2024-23675 |
CWE-284 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU85685 - Improper input validation CVE-2024-23676 |
CWE-20 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU85684 - Information Exposure Through Log Files CVE-2024-23677 |
CWE-532 | Low | 9.0.8 | 22.01.2024 |
SB2024012252 |
||
| #VU85683 - Deserialization of Untrusted Data CVE-2024-23678 |
CWE-502 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU83219 - Deserialization of Untrusted Data CVE-2023-39410 |
CWE-502 | Medium | 9.0.9, 9.1.4, 9.2.1 | 16.11.2023 |
SB2023111614 SB2023112014 SB2023112410 and 43 more |
||
| #VU82454 - Allocation of Resources Without Limits or Throttling CVE-2023-43642 |
CWE-770 | Medium | 9.0.9, 9.1.4, 9.2.1 | 26.10.2023 |
SB2023102621 SB2023102628 SB2023103020 and 63 more |
||
| #VU81964 - Improper input validation CVE-2023-39323 |
CWE-20 | Medium | 9.0.8, 9.1.3, 9.1.6, 9.2.3, 9.3.1 | 12.10.2023 |
SB2023101258 SB2023101259 SB2023101260 and 38 more |
||
| #VU79296 - Insufficient Verification of Data Authenticity CVE-2023-37920 |
CWE-345 | Medium | 9.0.8, 9.0.9, 9.1.3, 9.1.4, 9.2.1 | 09.08.2023 |
SB2023080939 SB20230821166 SB2023090820 and 89 more |
||
| #VU78913 - Improper Certificate Validation CVE-2023-29409 |
CWE-295 | Medium | 9.0.8, 9.1.3 | 03.08.2023 |
SB2023080320 SB2023080321 SB2023080370 and 98 more |
||
| #VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2023-29406 |
CWE-644 | Medium | 9.0.8, 9.1.3 | 17.07.2023 |
SB2023071737 SB2023071738 SB2023071739 and 94 more |
||
| #VU77531 - Improper Control of Generation of Code ('Code Injection') CVE-2023-29405 |
CWE-94 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.1.1, 9.1.3 | 19.06.2023 |
SB2023061954 SB2023061955 SB2023061956 and 45 more |
||
| #VU77530 - Improper Control of Generation of Code ('Code Injection') CVE-2023-29404 |
CWE-94 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.1.1, 9.1.3 | 19.06.2023 |
SB2023061954 SB2023061955 SB2023061956 and 44 more |
||
| #VU77529 - Permissions, Privileges, and Access Controls CVE-2023-29403 |
CWE-264 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.1.1, 9.1.3 | 19.06.2023 |
SB2023061954 SB2023061955 SB2023061956 and 46 more |
||
| #VU77528 - Improper Control of Generation of Code ('Code Injection') CVE-2023-29402 |
CWE-94 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.1.1, 9.1.3 | 19.06.2023 |
SB2023061954 SB2023061955 SB2023061956 and 45 more |
||
| #VU77362 - Resource exhaustion CVE-2023-34455 |
CWE-400 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 48 more |
||
| #VU77361 - Integer overflow CVE-2023-34454 |
CWE-190 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 39 more |
||
| #VU77359 - Integer overflow CVE-2023-34453 |
CWE-190 | Medium | 9.0.9, 9.1.4, 9.2.1 | 15.06.2023 |
SB2023061517 SB2023071708 SB2023072511 and 40 more |
||
| #VU71137 - Incorrect Regular Expression CVE-2022-40899 |
CWE-185 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.0.9, 9.1.1, 9.1.3, 9.1.4, 9.2.1 | 12.01.2023 |
SB2023011234 SB2023011239 SB2023011240 and 25 more |
||
| #VU65864 - Improper Control of Generation of Code ('Code Injection') CVE-2022-36364 |
CWE-94 | Medium | 9.0.9, 9.1.4, 9.2.1 | 28.07.2022 |
SB2022072832 SB2022122706 SB2023062723 and 3 more |
||
| #VU62403 - Improper input validation CVE-2021-22570 |
CWE-20 | Medium | 9.0.7, 9.1.2 | 19.04.2022 |
SB2022041949 SB2022062233 SB2022100638 and 34 more |
Showing elements 241 - 260 out of 472