Known vulnerabilities in Splunk Enterprise - page 17
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU80355 - Deserialization of Untrusted Data CVE-2013-7489 |
CWE-502 | Low | 8.2.12, 9.0.6, 9.1.1 | 04.09.2023 |
SB2020062626 SB2023090426 |
||
| #VU73721 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-41722 |
CWE-22 | Medium | 8.2.12, 9.0.6, 9.1.1 | 15.03.2023 |
SB2023030130 SB2023031537 SB2023031538 and 13 more |
||
| #VU72750 - Inefficient Algorithmic Complexity CVE-2022-25881 |
CWE-407 | Medium | 8.2.12, 9.0.6, 9.1.1 | 03.03.2023 |
SB2023030326 SB2023030328 SB2023031112 and 61 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 8.2.12, 9.0.6, 9.1.1 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU72247 - Improper input validation CVE-2022-38900 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 15.02.2023 |
SB2023021531 SB2023022714 SB2023032315 and 35 more |
||
| #VU71379 - Incorrect Regular Expression CVE-2022-40897 |
CWE-185 | Medium | 8.2.12, 9.0.6, 9.0.9, 9.1.1, 9.1.4, 9.2.1 | 20.01.2023 |
SB2023012008 SB2023012015 SB2023012016 and 99 more |
||
| #VU71261 - Improper input validation CVE-2022-1941 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 17.01.2023 |
SB2023011780 SB2023011801 SB2023011802 and 24 more |
||
| #VU69293 - Improper input validation CVE-2022-3171 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 14.11.2022 |
SB2022111433 SB2022111440 SB2022112934 and 105 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 8.2.12, 9.0.6, 9.1.1 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68779 - Improper Validation of Array Index CVE-2020-28852 |
CWE-129 | Medium | 8.2.12, 9.0.6, 9.1.1 | 26.10.2022 |
SB2021010205 SB2022102674 SB2022111597 and 13 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 8.2.12, 9.0.6, 9.1.1 | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU68387 - Resource Management Errors CVE-2022-2879 |
CWE-399 | Medium | 8.2.12, 9.0.6, 9.1.1 | 18.10.2022 |
SB2022101833 SB2022101834 SB2022102005 and 78 more |
||
| #VU67156 - Missing Authorization CVE-2021-20066 |
CWE-862 | Medium | 8.2.12, 9.0.6, 9.1.1 | 09.09.2022 |
SB2022091209 SB2023090426 |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 8.2.12, 9.0.6, 9.1.1 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU63173 - Permissions, Privileges, and Access Controls CVE-2022-29526 |
CWE-264 | Low | 8.2.12, 9.0.6, 9.1.1 | 14.05.2022 |
SB2022051403 SB2022051404 SB2022062928 and 64 more |
||
| #VU62512 - Improper input validation CVE-2021-3572 |
CWE-20 | Medium | 8.2.12, 9.0.6, 9.1.1 | 22.04.2022 |
SB2022042257 SB2022042259 SB2021071390 and 51 more |
||
| #VU60181 - Resource Management Errors CVE-2021-22569 |
CWE-399 | Medium | 8.2.12, 9.0.6, 9.1.1 | 31.01.2022 |
SB2022013106 SB2022013107 SB2022041933 and 42 more |
||
| #VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41182 |
CWE-79 | Medium | 8.2.12, 9.0.6, 9.1.1 | 20.11.2021 |
SB2021112002 SB2022011944 SB2022011946 and 32 more |
||
| #VU50139 - Incorrect Default Permissions CVE-2020-8908 |
CWE-276 | Low | 8.2.12, 9.0.6, 9.0.9, 9.1.1, 9.1.4, 9.2.1 | 11.12.2020 |
SB2020121114 SB2021031707 SB2021042104 and 62 more |
||
| #VU12886 - Uncontrolled Memory Allocation CVE-2018-10237 |
CWE-789 | Low | 8.2.12, 9.0.6, 9.0.9, 9.1.1, 9.1.4, 9.2.1 | 21.05.2018 |
SB2018052310 SB2018083005 SB2018092411 and 43 more |
Showing elements 321 - 340 out of 472