Known vulnerabilities in Splunk Enterprise - page 17
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85686 - Improper Access Control CVE-2024-23675 |
CWE-284 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU85685 - Improper input validation CVE-2024-23676 |
CWE-20 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU85684 - Information Exposure Through Log Files CVE-2024-23677 |
CWE-532 | Low | 9.0.8 | 22.01.2024 |
SB2024012252 |
||
| #VU85683 - Deserialization of Untrusted Data CVE-2024-23678 |
CWE-502 | Low | 9.0.8, 9.1.3 | 22.01.2024 |
SB2024012252 |
||
| #VU83245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-46213 |
CWE-79 | Medium | 9.0.7, 9.1.2 | 17.11.2023 |
SB2023111728 |
||
| #VU83244 - XML Injection CVE-2023-46214 |
CWE-91 | Medium | 9.0.7, 9.1.2 | 17.11.2023 |
SB2023111727 |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 9.0.7, 9.1.2 | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 9.0.7, 9.1.2 | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU77529 - Permissions, Privileges, and Access Controls CVE-2023-29403 |
CWE-264 | Medium | 8.2.12, 9.0.6, 9.0.8, 9.1.1, 9.1.3 | 19.06.2023 |
SB2023061954 SB2023061955 SB2023061956 and 46 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 9.0.7, 9.1.2 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
||
| #VU68897 - Resource exhaustion CVE-2022-32149 |
CWE-400 | Medium | 8.2.12, 9.0.6, 9.1.1 | 01.11.2022 |
SB2022110139 SB2022110140 SB2022110142 and 68 more |
||
| #VU67555 - Incorrect Regular Expression CVE-2022-40023 |
CWE-185 | Medium | 8.2.12, 9.0.6, 9.1.1 | 21.09.2022 |
SB2022092139 SB2022092141 SB2022102426 and 20 more |
||
| #VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-33194 |
CWE-835 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.07.2022 |
SB2021052653 SB2022072210 SB2022081842 and 16 more |
||
| #VU65267 - Improper Certificate Validation CVE-2022-27536 |
CWE-295 | Medium | 8.2.12, 9.0.6, 9.1.1 | 13.07.2022 |
SB2022071328 SB2022080503 SB2023022244 and 7 more |
||
| #VU65006 - Out-of-bounds read CVE-2021-38561 |
CWE-125 | Medium | 8.2.12, 9.0.6, 9.1.1 | 07.07.2022 |
SB2022070736 SB2022070742 SB2022071920 and 41 more |
||
| #VU64805 - Improper input validation CVE-2021-43565 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 29.06.2022 |
SB2021120347 SB2022062928 SB2022072127 and 39 more |
||
| #VU63912 - Security Features CVE-2022-31799 |
CWE-254 | Medium | 9.0.7, 9.1.2 | 01.06.2022 |
SB2022060117 SB2022061201 SB2022072635 and 14 more |
||
| #VU62403 - Improper input validation CVE-2021-22570 |
CWE-20 | Medium | 9.0.7, 9.1.2 | 19.04.2022 |
SB2022041949 SB2022062233 SB2022100638 and 34 more |
||
| #VU51486 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-27918 |
CWE-835 | Medium | 8.2.12, 9.0.6, 9.1.1 | 15.03.2021 |
SB2021031515 SB2021071515 SB2021071516 and 18 more |
||
| #VU51485 - Improper input validation CVE-2021-27919 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 15.03.2021 |
SB2021031515 SB2022080503 SB2022090717 and 4 more |
Showing elements 321 - 340 out of 570