Known vulnerabilities in Splunk Enterprise - page 14

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 570
Public exploits: 25
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 570 known vulnerabilities: 36 high, 322 medium, 212 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98558 - Improper Certificate Validation
CVE-2020-15719
CWE-295 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101547
SB2020082927
SB2019110531
#VU98541 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-45731
CWE-22 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98539 - Missing Authorization
CVE-2024-45732
CWE-862 Low
No
No
9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98538 - Deserialization of Untrusted Data
CVE-2024-45733
CWE-502 Medium
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98537 - Improper Access Control
CVE-2024-45734
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98536 - Improper Access Control
CVE-2024-45735
CWE-284 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
SB2024101515
#VU98535 - Resource exhaustion
CVE-2024-45736
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98534 - Cross-Site Request Forgery (CSRF)
CVE-2024-45737
CWE-352 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98533 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45738
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98531 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45739
CWE-200 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101514
#VU98530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45740
CWE-79 Low
No
No
9.1.6, 9.2.3 15.10.2024 SB2024101514
#VU98529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45741
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.0 15.10.2024 SB2024101514
#VU93553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-36991
CWE-22 Medium
Available
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU50389 - Integer underflow
CVE-2020-36221
CWE-191 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021011828
and 15 more
#VU50390 - Reachable Assertion
CVE-2020-36222
CWE-617 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021011829
and 14 more
#VU50391 - Double Free
CVE-2020-36223
CWE-415 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50392 - Double Free
CVE-2020-36225
CWE-415 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50396 - Type confusion
CVE-2020-36229
CWE-843 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more
#VU50398 - Release of invalid pointer or reference
CVE-2020-36224
CWE-763 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692
CWE-476 Medium
No
No
9.1.6, 9.2.3, 9.3.1 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more


Showing elements 261 - 280 out of 570