Known vulnerabilities in Splunk Enterprise - page 18

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 570
Public exploits: 25
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 570 known vulnerabilities: 36 high, 322 medium, 212 low Critical High Medium Low

Vulnerabilities (570)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491
CWE-345 High
No
No
8.2.12, 9.0.6, 9.1.1 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720
CWE-22 Medium
No
No
8.2.12, 9.0.6, 9.1.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69449 - NULL Pointer Dereference
CVE-2020-29652
CWE-476 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.11.2022 SB2020121742
SB2022112104
SB2023010607
and 7 more
#VU69405 - Improper input validation
CVE-2022-41716
CWE-20 Low
No
No
8.2.12, 9.0.6, 9.1.1 17.11.2022 SB2022111727
SB2022111728
SB2022111741
and 32 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
8.2.12, 9.0.6, 9.1.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU66120 - Improper input validation
CVE-2021-41772
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.08.2022 SB2021110826
SB2022080503
SB2022083021
and 22 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-27191
CWE-327 Medium
No
No
8.2.12, 9.0.6, 9.1.1 10.04.2022 SB2022041004
SB2022041406
SB2022081226
and 91 more
#VU62038 - Resource exhaustion
CVE-2022-23772
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773
CWE-863 Low
Available
No
8.2.12, 9.0.6, 9.1.1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806
CWE-252 Medium
No
No
8.2.12, 9.0.6, 9.1.1 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.1.1 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU60921 - Allocation of Resources Without Limits or Throttling
CVE-2021-39293
CWE-770 Medium
No
No
8.2.12, 9.0.6, 9.1.1 01.03.2022 SB2022030106
SB2022030107
SB2022061528
and 20 more
#VU59042 - Resource exhaustion
CVE-2021-44717
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195
CWE-79 Medium
No
No
8.2.12, 9.0.6, 9.1.1 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Available
No
8.2.12, 9.0.6, 9.1.1 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 66 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525
CWE-674 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU54521 - Resource exhaustion
CVE-2021-33196
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more


Showing elements 341 - 360 out of 570