Known vulnerabilities in Splunk Enterprise - page 4
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-20137 |
CWE-22 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.3 | 19.02.2026 |
SB2026021959 |
||
| #VU123093 - Cleartext Storage of Sensitive Information CVE-2026-20142 |
CWE-312 | Medium | 9.2.11, 9.3.9, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021961 |
||
| #VU123092 - Uncontrolled Search Path Element CVE-2026-20140 |
CWE-427 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021960 |
||
| #VU123091 - Untrusted Search Path CVE-2026-20143 |
CWE-426 | Low | 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021960 |
||
| #VU118191 - Resource exhaustion CVE-2025-61724 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025111491 and 20 more |
||
| #VU118190 - Resource exhaustion CVE-2025-58183 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110725 SB2025110726 and 172 more |
||
| #VU118189 - Improper input validation CVE-2025-58188 |
CWE-20 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 108 more |
||
| #VU118188 - Allocation of Resources Without Limits or Throttling CVE-2025-58186 |
CWE-770 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025120304 and 19 more |
||
| #VU118187 - Resource exhaustion CVE-2025-58185 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 110 more |
||
| #VU118186 - Improper input validation CVE-2025-47912 |
CWE-20 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025120304 and 19 more |
||
| #VU118184 - Resource exhaustion CVE-2025-61723 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 116 more |
||
| #VU118183 - Improper Encoding or Escaping of Output CVE-2025-58189 |
CWE-116 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110711 SB2025110712 and 118 more |
||
| #VU118181 - Resource exhaustion CVE-2025-58187 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110706 SB2025110731 SB2025112832 and 21 more |
||
| #VU118179 - Resource exhaustion CVE-2025-61725 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110714 SB2025110715 and 74 more |
||
| #VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-47907 |
CWE-362 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 14.08.2025 |
SB2025081423 SB2025081424 SB2025081425 and 48 more |
||
| #VU114079 - Improper input validation CVE-2025-47906 |
CWE-20 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 14.08.2025 |
SB2025081423 SB2025081424 SB2025081425 and 130 more |
||
| #VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27210 |
CWE-22 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 22.07.2025 |
SB2025072233 SB2025082103 SB2025091525 and 6 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU110251 - Exposure of sensitive information to an unauthorized actor CVE-2025-4673 |
CWE-200 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.06.2025 |
SB2025060701 SB2025060702 SB2025061002 and 35 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 28 more |
Showing elements 61 - 80 out of 472