Known vulnerabilities in Splunk Enterprise - page 15
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71398 - Insufficient Verification of Data Authenticity CVE-2022-23491 |
CWE-345 | High | 8.2.12, 9.0.6, 9.1.1 | 20.01.2023 |
SB2023012034 SB2023012035 SB2023012036 and 51 more |
||
| #VU71253 - Improper input validation CVE-2022-3510 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 17.01.2023 |
SB2023011753 SB2023011787 SB2023013027 and 37 more |
||
| #VU66120 - Improper input validation CVE-2021-41772 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 04.08.2022 |
SB2021110826 SB2022080503 SB2022083021 and 22 more |
||
| #VU65080 - Memory corruption CVE-2021-41771 |
CWE-119 | Medium | 8.2.12, 9.0.6, 9.1.1 | 11.07.2022 |
SB2022071109 SB2022080503 SB2022083021 and 21 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU62038 - Resource exhaustion CVE-2022-23772 |
CWE-400 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 40 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 8.2.12, 9.0.6, 9.1.1 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
||
| #VU60921 - Allocation of Resources Without Limits or Throttling CVE-2021-39293 |
CWE-770 | Medium | 8.2.12, 9.0.6, 9.1.1 | 01.03.2022 |
SB2022030106 SB2022030107 SB2022061528 and 20 more |
||
| #VU59042 - Resource exhaustion CVE-2021-44717 |
CWE-400 | Medium | 8.2.12, 9.0.6, 9.1.1 | 16.12.2021 |
SB2021121610 SB2021121646 SB2022031628 and 32 more |
||
| #VU58824 - Improper input validation CVE-2021-44716 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.12.2021 |
SB2021121010 SB2021121011 SB2021121605 and 67 more |
||
| #VU57579 - Memory corruption CVE-2021-38297 |
CWE-119 | High | 8.2.12, 9.0.6, 9.1.1 | 21.10.2021 |
SB2021102121 SB2021122801 SB2021102022 and 23 more |
||
| #VU56829 - Improper input validation CVE-2021-29923 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.09.2021 |
SB2021092225 SB2021092226 SB2021100408 and 37 more |
||
| #VU56024 - Resource Management Errors CVE-2021-33198 |
CWE-399 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 46 more |
||
| #VU56023 - Missing Authorization CVE-2021-33197 |
CWE-862 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 41 more |
||
| #VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-33195 |
CWE-79 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.08.2021 |
SB2021070405 SB2021082204 SB2021083116 and 38 more |
||
| #VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-36221 |
CWE-362 | Medium | 8.2.12, 9.0.6, 9.1.1 | 10.08.2021 |
SB2021081001 SB2021081217 SB2021081219 and 32 more |
||
| #VU54910 - Uncontrolled Recursion CVE-2021-31525 |
CWE-674 | Medium | 8.2.12, 9.0.6, 9.1.1 | 15.07.2021 |
SB2021071514 SB2021052725 SB2021071515 and 39 more |
||
| #VU54521 - Resource exhaustion CVE-2021-33196 |
CWE-400 | Medium | 8.2.12, 9.0.6, 9.1.1 | 04.07.2021 |
SB2021070405 SB2021070406 SB2021071515 and 37 more |
Showing elements 281 - 300 out of 472