Known vulnerabilities in Splunk Enterprise - page 21

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80335 - Untrusted Search Path
CVE-2023-40596
CWE-426 Low
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80334 - Absolute Path Traversal
CVE-2023-40597
CWE-36 Low
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80332 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-40598
CWE-78 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80331 - Deserialization of Untrusted Data
CVE-2023-40595
CWE-502 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80330 - Resource exhaustion
CVE-2023-40594
CWE-400 Low
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40592
CWE-79 Medium
No
No
8.2.12, 9.0.6, 9.1.1 04.09.2023 SB2023090417
#VU80318 - Resource exhaustion
CVE-2023-40593
CWE-400 Medium
No
No
8.2.12, 9.0.6 04.09.2023 SB2023090417
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947
CWE-345 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946
CWE-319 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56610 - Double Free
CVE-2021-22945
CWE-415 Low
No
No
8.2.12, 9.0.6, 9.1.1 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 20 more
#VU55148 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-22922
CWE-611 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 27 more
#VU55147 - Improper Certificate Validation
CVE-2021-22926
CWE-295 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072814
and 11 more
#VU55146 - Improper Certificate Validation
CVE-2021-22924
CWE-295 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072202
and 33 more
#VU55145 - Insufficiently Protected Credentials
CVE-2021-22923
CWE-522 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.07.2021 SB2021072108
SB2021072162
SB2021072204
and 28 more
#VU53589 - Use After Free
CVE-2021-22901
CWE-416 High
No
No
8.2.12, 9.0.6, 9.1.1 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898
CWE-457 Medium
No
No
8.2.12, 9.0.6, 9.1.1 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU53584 - Inadequate Encryption Strength
CVE-2021-22897
CWE-326 Low
No
No
8.2.12, 9.0.6, 9.1.1 26.05.2021 SB2021052620
SB2021052719
SB2021060321
and 9 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890
CWE-300 Medium
No
No
8.2.12, 9.0.6, 9.1.1 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876
CWE-200 Medium
No
No
8.2.12, 9.0.6, 9.1.1 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286
CWE-299 Medium
No
No
8.2.12, 9.0.6, 9.1.1 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more


Showing elements 401 - 420 out of 472