Known vulnerabilities in Splunk Enterprise - page 25
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
532
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (532)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77075 - Improper input validation CVE-2023-22940 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77074 - Uncaught Exception CVE-2023-22941 |
CWE-248 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77071 - Cross-Site Request Forgery (CSRF) CVE-2023-22942 |
CWE-352 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU77069 - Improper input validation CVE-2023-22939 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77068 - Improper Authorization CVE-2023-22938 |
CWE-285 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77067 - Server-Side Request Forgery (SSRF) CVE-2023-22936 |
CWE-918 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77064 - Improper input validation CVE-2023-22935 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77063 - Improper input validation CVE-2023-22934 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77062 - Improper Authorization CVE-2023-22931 |
CWE-285 | Low | 8.1.13, 8.2.10 | 07.06.2023 |
SB2023060728 |
||
| #VU77061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22933 |
CWE-79 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU76920 - Improper Output Neutralization for Logs CVE-2023-32712 |
CWE-117 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76919 - Exposure of sensitive information to an unauthorized actor CVE-2023-32710 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76918 - Improper Check for Unusual or Exceptional Conditions CVE-2023-32716 |
CWE-754 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76917 - Improper Access Control CVE-2023-32717 |
CWE-284 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76916 - Improper Authorization CVE-2023-32709 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76915 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-32708 |
CWE-113 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76914 - Improper Authorization CVE-2023-32707 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76913 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-32706 |
CWE-611 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-32711 |
CWE-79 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU72381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22932 |
CWE-79 | Low | 9.0.4 | 20.02.2023 |
SB2023022005 |
Showing elements 481 - 500 out of 532