Known vulnerabilities in Splunk Enterprise - page 28
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU156971 - Authorization Bypass Through User-Controlled Key CVE-2026-76287 |
CWE-639 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156972 - Resource exhaustion CVE-2026-76288 |
CWE-400 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156973 - Allocation of Resources Without Limits or Throttling CVE-2026-76289 |
CWE-770 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156974 - Resource exhaustion CVE-2026-76290 |
CWE-400 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156975 - Improper Access Control CVE-2026-76291 |
CWE-284 | Medium | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU156976 - Missing Authorization CVE-2026-76292 |
CWE-862 | Low | 9.4.16, 10.0.11, 10.2.8, 10.4.4 | 22.10.2026 |
SB20261022248 |
||
| #VU155959 - Improper Adherence to Coding Standards CVE-2026-76285 |
CWE-710 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 15.10.2026 |
SB20261015166 |
||
| #VU155949 - Improper control of a resource through its lifetime CVE-2026-76282 |
CWE-664 | Medium | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 15.10.2026 |
SB20261015166 |
||
| #VU155950 - Protection Mechanism Failure CVE-2026-76283 |
CWE-693 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 15.10.2026 |
SB20261015166 |
||
| #VU155951 - Improper Neutralization CVE-2026-76284 |
CWE-707 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 15.10.2026 |
SB20261015166 |
||
| #VU154117 - Improper Access Control CVE-2026-76281 |
CWE-284 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB20261015166 |
||
| #VU154114 - Improper input validation CVE-2026-76279 |
CWE-20 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154115 - Incorrect Permission Assignment for Critical Resource CVE-2026-76280 |
CWE-732 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154100 - Improper Access Control CVE-2026-76265 |
CWE-284 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154101 - Improper Privilege Management CVE-2026-76266 |
CWE-269 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154102 - Improper Output Neutralization for Logs CVE-2026-76267 |
CWE-117 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154103 - Missing Authentication for Critical Function CVE-2026-76268 |
CWE-306 | High | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154104 - Authorization Bypass Through User-Controlled Key CVE-2026-76269 |
CWE-639 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154105 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76270 |
CWE-89 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
||
| #VU154107 - Missing Authorization CVE-2026-76272 |
CWE-862 | Low | 9.4.15, 10.0.10, 10.2.7, 10.4.3 | 12.10.2026 |
SB2026101252 SB2026101253 |
Showing elements 541 - 560 out of 570