Known vulnerabilities in Splunk Enterprise - page 18

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73826 - Improper input validation
CVE-2023-27533
CWE-20 Low
No
No
8.2.12, 9.0.6, 9.1.1 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 42 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916
CWE-770 Medium
No
No
8.2.12, 9.0.6, 9.1.1 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915
CWE-319 Medium
No
No
8.2.12, 9.0.6, 9.1.1 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU70457 - Security Features
CVE-2022-43551
CWE-254 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552
CWE-416 Low
No
No
8.2.12, 9.0.6, 9.1.1 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601
CWE-94 High
No
No
8.2.12, 9.0.6, 9.1.1, 9.2.8, 9.3.6, 9.4.4, 10.0.1 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.1.1 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU68749 - Cleartext Transmission of Sensitive Information
CVE-2022-42916
CWE-319 Medium
No
No
8.2.12, 9.0.6, 9.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102703
and 27 more
#VU68748 - Double Free
CVE-2022-42915
CWE-415 Medium
No
No
8.2.12, 9.0.6, 9.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 26 more
#VU68747 - Stack-based buffer overflow
CVE-2022-35260
CWE-121 Low
No
No
8.2.12, 9.0.6, 9.1.1 26.10.2022 SB2022102624
SB2022102662
SB2022102705
and 17 more
#VU66881 - Improper input validation
CVE-2022-35252
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 31.08.2022 SB2022083106
SB2022090108
SB2022090217
and 55 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987
CWE-601 Medium
No
No
8.2.12, 9.0.6, 9.1.1 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208
CWE-347 Medium
No
No
8.2.12, 9.0.6, 9.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64684 - Incorrect Default Permissions
CVE-2022-32207
CWE-276 Low
No
No
8.2.12, 9.0.6, 9.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 35 more
#VU64682 - Resource exhaustion
CVE-2022-32206
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64681 - Resource exhaustion
CVE-2022-32205
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 32 more
#VU63011 - Cleartext Transmission of Sensitive Information
CVE-2022-30115
CWE-319 Low
No
No
8.2.12, 9.0.6, 9.1.1 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 11 more
#VU63009 - Incorrect Implementation of Authentication Algorithm
CVE-2022-27782
CWE-303 Medium
No
No
8.2.12, 9.0.6, 9.1.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 68 more
#VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-27781
CWE-835 Medium
No
No
8.2.12, 9.0.6, 9.1.1 11.05.2022 SB2022051112
SB2022051136
SB2022051170
and 36 more
#VU63005 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27779
CWE-200 Low
No
No
8.2.12, 9.0.6, 9.1.1 11.05.2022 SB2022051112
SB2022051170
SB2022072605
and 9 more


Showing elements 341 - 360 out of 472