Known vulnerabilities in Splunk Enterprise - page 15

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 570
Public exploits: 25
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 570 known vulnerabilities: 36 high, 322 medium, 212 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93572 - NULL Pointer Dereference
CVE-2024-36982
CWE-476 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93571 - Command injection
CVE-2024-36983
CWE-77 High
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93570 - Deserialization of Untrusted Data
CVE-2024-36984
CWE-502 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93569 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-36985
CWE-94 High
Available
Exploited
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93568 - Authorization Bypass Through User-Controlled Key
CVE-2024-36986
CWE-639 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93567 - Unrestricted Upload of File with Dangerous Type
CVE-2024-36987
CWE-434 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93566 - Improper Access Control
CVE-2024-36989
CWE-284 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93554 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-36990
CWE-835 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93552 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36992
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36993
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36994
CWE-79 Medium
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93549 - Permissions, Privileges, and Access Controls
CVE-2024-36995
CWE-264 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93548 - Exposure of sensitive information to an unauthorized actor
CVE-2024-36996
CWE-200 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU93547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36997
CWE-79 Low
No
No
9.0.10, 9.1.5, 9.2.2 01.07.2024 SB2024070165
#VU83631 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-47627
CWE-444 Medium
No
No
9.0.9, 9.1.4, 9.2.1 04.12.2023 SB2023120403
SB2023120406
SB2023120407
and 16 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896
CWE-1333 Medium
No
No
9.0.9, 9.1.4, 9.2.1 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU77651 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-33733
CWE-94 High
Available
No
9.0.10, 9.1.5, 9.2.2 22.06.2023 SB2023062280
SB2023062282
SB2023062845
and 6 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681
CWE-200 Medium
Available
No
9.0.9, 9.1.4, 9.2.1 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU71377 - Improper input validation
CVE-2022-40898
CWE-20 Medium
No
No
9.0.9, 9.1.4, 9.2.1 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.0.8, 9.0.9, 9.1.1, 9.1.3, 9.1.4, 9.2.1 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more


Showing elements 281 - 300 out of 570