Known vulnerabilities in Splunk Enterprise - page 22
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77075 - Improper input validation CVE-2023-22940 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77074 - Uncaught Exception CVE-2023-22941 |
CWE-248 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77071 - Cross-Site Request Forgery (CSRF) CVE-2023-22942 |
CWE-352 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU77069 - Improper input validation CVE-2023-22939 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77068 - Improper Authorization CVE-2023-22938 |
CWE-285 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77067 - Server-Side Request Forgery (SSRF) CVE-2023-22936 |
CWE-918 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77064 - Improper input validation CVE-2023-22935 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77063 - Improper input validation CVE-2023-22934 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77062 - Improper Authorization CVE-2023-22931 |
CWE-285 | Low | 8.1.13, 8.2.10 | 07.06.2023 |
SB2023060728 |
||
| #VU77061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22933 |
CWE-79 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU76920 - Improper Output Neutralization for Logs CVE-2023-32712 |
CWE-117 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76919 - Exposure of sensitive information to an unauthorized actor CVE-2023-32710 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76918 - Improper Check for Unusual or Exceptional Conditions CVE-2023-32716 |
CWE-754 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76917 - Improper Access Control CVE-2023-32717 |
CWE-284 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76916 - Improper Authorization CVE-2023-32709 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76915 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-32708 |
CWE-113 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76914 - Improper Authorization CVE-2023-32707 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76913 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-32706 |
CWE-611 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-32711 |
CWE-79 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU72381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22932 |
CWE-79 | Low | 9.0.4 | 20.02.2023 |
SB2023022005 |
Showing elements 421 - 440 out of 472