Known vulnerabilities in Splunk Enterprise - page 20

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73872 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29804
CWE-22 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.03.2023 SB2022071516
SB2023011810
SB2023040531
and 11 more
#VU68839 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-30580
CWE-94 Low
No
No
8.2.12, 9.0.6, 9.1.1 31.10.2022 SB2022103122
SB2023022738
SB2023033008
and 22 more
#VU66122 - Use of Insufficiently Random Values
CVE-2022-30629
CWE-330 Medium
No
No
8.2.12, 9.0.6, 9.1.1 05.08.2022 SB2022080501
SB2022080503
SB2022081106
and 81 more
#VU66121 - Improper input validation
CVE-2022-32189
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66069 - Resource exhaustion
CVE-2022-28131
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 72 more
#VU66068 - Resource exhaustion
CVE-2022-30635
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66067 - Resource exhaustion
CVE-2022-30632
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66066 - Security Features
CVE-2022-32148
CWE-254 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66065 - Resource exhaustion
CVE-2022-1962
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705
CWE-444 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more
#VU66063 - Resource exhaustion
CVE-2022-30630
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 79 more
#VU66062 - Resource exhaustion
CVE-2022-30631
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 100 more
#VU62644 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27776
CWE-200 Low
No
No
8.2.12, 9.0.6, 9.1.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 62 more
#VU62643 - Resource Management Errors
CVE-2022-27775
CWE-399 Low
No
No
8.2.12, 9.0.6, 9.1.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 30 more
#VU62641 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27774
CWE-200 Medium
No
No
8.2.12, 9.0.6, 9.1.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 57 more
#VU62640 - Improper Authentication
CVE-2022-22576
CWE-287 Medium
No
No
8.2.12, 9.0.6, 9.1.1 27.04.2022 SB2022042706
SB2022042803
SB2022042904
and 60 more
#VU55149 - Use of Uninitialized Variable
CVE-2021-22925
CWE-457 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 38 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285
CWE-674 Low
No
No
8.2.12, 9.0.6, 9.1.1 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284
CWE-200 Medium
No
No
8.2.12, 9.0.6, 9.1.1 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU45794 - Expired pointer dereference
CVE-2020-8231
CWE-825 Low
No
No
8.2.12, 9.0.6, 9.1.1 20.08.2020 SB2020081916
SB2020082001
SB2020081920
and 29 more


Showing elements 381 - 400 out of 472