Known vulnerabilities in Splunk Enterprise - page 5
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
472
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (472)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120254 - Improper Handling of Length Parameter Inconsistency CVE-2025-14847 |
CWE-130 | High | 9.2.12, 9.3.9, 9.4.8, 10.0.3, 10.2.0 | 23.12.2025 |
SB2025122318 SB2026011607 SB2026012973 and 9 more |
||
| #VU119140 - Improper Access Control CVE-2025-20383 |
CWE-284 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119139 - Improper input validation CVE-2025-20389 |
CWE-20 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119120 - Server-Side Request Forgery (SSRF) CVE-2025-20388 |
CWE-918 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119119 - Incorrect Permission Assignment for Critical Resource CVE-2025-20386 |
CWE-732 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20385 |
CWE-79 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119117 - Improper Output Neutralization for Logs CVE-2025-20384 |
CWE-117 | Medium | 9.2.10, 9.3.8, 9.4.6, 10.0.1 | 04.12.2025 |
SB2025120404 |
||
| #VU119116 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20382 |
CWE-601 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU118468 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20378 |
CWE-601 | Low | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU118466 - Improper Access Control CVE-2025-20379 |
CWE-284 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU116648 - Server-Side Request Forgery (SSRF) CVE-2025-20371 |
CWE-918 | Medium | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 07.10.2025 |
SB2025100708 |
||
| #VU116647 - Resource exhaustion CVE-2025-20370 |
CWE-400 | Low | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 07.10.2025 |
SB2025100708 |
||
| #VU116646 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-20369 |
CWE-611 | Medium | 9.2.8, 9.3.6, 9.4.4 | 07.10.2025 |
SB2025100708 |
||
| #VU116645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20368 |
CWE-79 | Low | 9.2.8, 9.3.6, 9.4.4 | 07.10.2025 |
SB2025100708 |
||
| #VU116644 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20367 |
CWE-79 | Low | 9.2.8, 9.3.6, 9.4.4 | 07.10.2025 |
SB2025100708 |
||
| #VU116213 - Out-of-bounds write CVE-2025-9230 |
CWE-787 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 01.10.2025 |
SB2025100119 SB2025100132 SB2025100133 and 107 more |
||
| #VU110253 - Protection Mechanism Failure CVE-2025-22874 |
CWE-693 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.06.2025 |
SB2025060702 SB2025061002 SB2025081114 and 16 more |
||
| #VU110252 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-0913 |
CWE-59 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.06.2025 |
SB2025060702 SB2025061002 SB2025061003 and 8 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 107 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
Showing elements 81 - 100 out of 472