Known vulnerabilities in Splunk Enterprise - page 23

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72379 - Improper input validation
CVE-2023-22937
CWE-20 Low
No
No
8.1.13, 8.2.10, 9.0.4 20.02.2023 SB2023022005
#VU68951 - Resource exhaustion
CVE-2022-43572
CWE-400 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68950 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-43571
CWE-94 Medium
Available
Exploited
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68949 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-43570
CWE-611 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68948 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43569
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43568
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68946 - Deserialization of Untrusted Data
CVE-2022-43567
CWE-502 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68945 - Cross-Site Request Forgery (CSRF)
CVE-2022-43566
CWE-352 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68944 - Cross-Site Request Forgery (CSRF)
CVE-2022-43565
CWE-352 Medium
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68943 - Resource exhaustion
CVE-2022-43564
CWE-400 Low
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68942 - Cross-Site Request Forgery (CSRF)
CVE-2022-43563
CWE-352 Medium
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68941 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-43562
CWE-644 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43561
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU66554 - Improper input validation
CVE-2022-37439
CWE-20 Medium
No
No
8.1.11, 8.2.7.1 16.08.2022 SB2022081656
#VU66546 - Exposure of sensitive information to an unauthorized actor
CVE-2022-37438
CWE-200 Low
No
No
8.1.11, 8.2.7.1, 9.0.1 16.08.2022 SB2022081634
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
8.1.11, 8.2.7.1, 9.0.1 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62741 - Integer overflow
CVE-2022-29824
CWE-190 High
No
No
8.1.11, 8.2.7.1, 9.0.1 03.05.2022 SB2022050305
SB2022050306
SB2022050307
and 73 more
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
8.1.12, 8.2.9, 9.0.2 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60922 - Use After Free
CVE-2022-23308
CWE-416 High
No
No
8.1.11, 8.2.7.1, 9.0.1 01.03.2022 SB2022030109
SB2022030110
SB2022031503
and 59 more
#VU53289 - Improper input validation
CVE-2021-3541
CWE-20 Medium
No
No
8.1.11, 8.2.7.1, 9.0.1 16.05.2021 SB2021051601
SB2021051602
SB2021061811
and 32 more


Showing elements 441 - 460 out of 472