Known vulnerabilities in Splunk Enterprise - page 14

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46213
CWE-79 Medium
No
No
9.0.7, 9.1.2 17.11.2023 SB2023111728
#VU83244 - XML Injection
CVE-2023-46214
CWE-91 Medium
Available
No
9.0.7, 9.1.2 17.11.2023 SB2023111727
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
9.0.7, 9.1.2 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
9.0.7, 9.1.2 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
9.0.7, 9.1.2 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720
CWE-22 Medium
No
No
8.2.12, 9.0.6, 9.1.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69449 - NULL Pointer Dereference
CVE-2020-29652
CWE-476 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.11.2022 SB2020121742
SB2022112104
SB2023010607
and 7 more
#VU69405 - Improper input validation
CVE-2022-41716
CWE-20 Low
No
No
8.2.12, 9.0.6, 9.1.1 17.11.2022 SB2022111727
SB2022111728
SB2022111741
and 32 more
#VU68897 - Resource exhaustion
CVE-2022-32149
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
8.2.12, 9.0.6, 9.1.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33194
CWE-835 Medium
No
No
8.2.12, 9.0.6, 9.1.1 22.07.2022 SB2021052653
SB2022072210
SB2022081842
and 16 more
#VU65267 - Improper Certificate Validation
CVE-2022-27536
CWE-295 Medium
No
No
8.2.12, 9.0.6, 9.1.1 13.07.2022 SB2022071328
SB2022080503
SB2023022244
and 7 more
#VU65006 - Out-of-bounds read
CVE-2021-38561
CWE-125 Medium
No
No
8.2.12, 9.0.6, 9.1.1 07.07.2022 SB2022070736
SB2022070742
SB2022071920
and 41 more
#VU64805 - Improper input validation
CVE-2021-43565
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU63912 - Security Features
CVE-2022-31799
CWE-254 Medium
No
No
9.0.7, 9.1.2 01.06.2022 SB2022060117
SB2022061201
SB2022072635
and 13 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
8.2.12, 9.0.6, 9.1.1 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU51486 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27918
CWE-835 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.03.2021 SB2021031515
SB2021071515
SB2021071516
and 18 more
#VU51485 - Improper input validation
CVE-2021-27919
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.03.2021 SB2021031515
SB2022080503
SB2022090717
and 4 more


Showing elements 261 - 280 out of 472