Known vulnerabilities in Splunk Enterprise - page 25
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77075 - Improper input validation CVE-2023-22940 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77074 - Uncaught Exception CVE-2023-22941 |
CWE-248 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77071 - Cross-Site Request Forgery (CSRF) CVE-2023-22942 |
CWE-352 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU77069 - Improper input validation CVE-2023-22939 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77068 - Improper Authorization CVE-2023-22938 |
CWE-285 | Low | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060726 |
||
| #VU77067 - Server-Side Request Forgery (SSRF) CVE-2023-22936 |
CWE-918 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77064 - Improper input validation CVE-2023-22935 |
CWE-20 | High | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77063 - Improper input validation CVE-2023-22934 |
CWE-20 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060727 |
||
| #VU77062 - Improper Authorization CVE-2023-22931 |
CWE-285 | Low | 8.1.13, 8.2.10 | 07.06.2023 |
SB2023060728 |
||
| #VU77061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22933 |
CWE-79 | Medium | 8.1.13, 8.2.10, 9.0.4 | 07.06.2023 |
SB2023060729 |
||
| #VU76920 - Improper Output Neutralization for Logs CVE-2023-32712 |
CWE-117 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76919 - Exposure of sensitive information to an unauthorized actor CVE-2023-32710 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76918 - Improper Check for Unusual or Exceptional Conditions CVE-2023-32716 |
CWE-754 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76917 - Improper Access Control CVE-2023-32717 |
CWE-284 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76916 - Improper Authorization CVE-2023-32709 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76915 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-32708 |
CWE-113 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76914 - Improper Authorization CVE-2023-32707 |
CWE-285 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76913 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-32706 |
CWE-611 | Medium | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU76850 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-32711 |
CWE-79 | Low | 8.1.14, 8.2.11, 9.0.5 | 05.06.2023 |
SB2023060518 |
||
| #VU72381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22932 |
CWE-79 | Low | 9.0.4 | 20.02.2023 |
SB2023022005 |
Showing elements 481 - 500 out of 570