Known vulnerabilities in Splunk Enterprise - page 3
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
532
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (532)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144486 - Missing Authentication for Critical Function CVE-2026-76355 |
CWE-306 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144445 - Improper Access Control CVE-2026-76312 |
CWE-284 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144446 - Improper Access Control CVE-2026-76313 |
CWE-284 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144447 - Improper Control of Generation of Code ('Code Injection') CVE-2026-76314 |
CWE-94 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144448 - Improper Control of Generation of Code ('Code Injection') CVE-2026-76315 |
CWE-94 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144449 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76316 |
CWE-943 | High | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144450 - Path Traversal: \'/dir/../filename\' CVE-2026-76317 |
CWE-26 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144451 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-76318 |
CWE-79 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144452 - Missing Authorization CVE-2026-76319 |
CWE-862 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144453 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76320 |
CWE-943 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144454 - Command injection CVE-2026-76321 |
CWE-77 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144455 - Missing Authorization CVE-2026-76322 |
CWE-862 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144436 - Use of Hard-coded Cryptographic Key CVE-2026-76258 |
CWE-321 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144437 - Improper Privilege Management CVE-2026-76259 |
CWE-269 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144438 - Incorrect Permission Assignment for Critical Resource CVE-2026-76260 |
CWE-732 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144439 - Incorrect Permission Assignment for Critical Resource CVE-2026-76261 |
CWE-732 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144441 - Authorization Bypass Through User-Controlled Key CVE-2026-76263 |
CWE-639 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144442 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76309 |
CWE-89 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144443 - Improper Access Control CVE-2026-76310 |
CWE-284 | High | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144444 - Improper Access Control CVE-2026-76311 |
CWE-284 | High | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
Showing elements 41 - 60 out of 532