Known vulnerabilities in Splunk Enterprise - page 7
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126413 - Insecure Temporary File CVE-2026-20204 |
CWE-377 | Low | 9.3.11, 9.4.10, 10.0.5, 10.2.1 | 17.04.2026 |
SB2026031315 |
||
| #VU123097 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-20137 |
CWE-22 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.3 | 19.02.2026 |
SB2026021959 |
||
| #VU123096 - Unprotected Storage of Credentials CVE-2026-20138 |
CWE-256 | Medium | 9.2.11, 9.3.9, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021961 |
||
| #VU123095 - Resource exhaustion CVE-2026-20139 |
CWE-400 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.2 | 19.02.2026 |
SB2026021964 |
||
| #VU123094 - Improper Access Control CVE-2026-20141 |
CWE-284 | Medium | 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021963 |
||
| #VU123093 - Cleartext Storage of Sensitive Information CVE-2026-20142 |
CWE-312 | Medium | 9.2.11, 9.3.9, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021961 |
||
| #VU123092 - Uncontrolled Search Path Element CVE-2026-20140 |
CWE-427 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021960 |
||
| #VU123091 - Untrusted Search Path CVE-2026-20143 |
CWE-426 | Low | 9.3.9, 9.4.8, 10.0.3 | 19.02.2026 |
SB2026021960 |
||
| #VU123090 - Information Exposure Through Log Files CVE-2026-20144 |
CWE-532 | Medium | 9.2.11, 9.3.8, 9.4.7, 10.0.2 | 19.02.2026 |
SB2026021962 |
||
| #VU118190 - Resource exhaustion CVE-2025-58183 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110725 SB2025110726 and 177 more |
||
| #VU118189 - Improper input validation CVE-2025-58188 |
CWE-20 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 117 more |
||
| #VU118188 - Allocation of Resources Without Limits or Throttling CVE-2025-58186 |
CWE-770 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025120304 and 20 more |
||
| #VU118187 - Resource exhaustion CVE-2025-58185 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110716 SB2025110717 and 117 more |
||
| #VU118186 - Improper input validation CVE-2025-47912 |
CWE-20 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110731 SB2025120304 and 22 more |
||
| #VU118183 - Improper Encoding or Escaping of Output CVE-2025-58189 |
CWE-116 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110705 SB2025110711 SB2025110712 and 125 more |
||
| #VU118181 - Resource exhaustion CVE-2025-58187 |
CWE-400 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.11.2025 |
SB2025110706 SB2025110731 SB2025112832 and 23 more |
||
| #VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-47907 |
CWE-362 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 14.08.2025 |
SB2025081423 SB2025081424 SB2025081425 and 52 more |
||
| #VU114079 - Improper input validation CVE-2025-47906 |
CWE-20 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 14.08.2025 |
SB2025081423 SB2025081424 SB2025081425 and 130 more |
||
| #VU110251 - Exposure of sensitive information to an unauthorized actor CVE-2025-4673 |
CWE-200 | Low | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 07.06.2025 |
SB2025060701 SB2025060702 SB2025061002 and 35 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 9.2.12, 9.3.9, 9.3.10, 9.4.8, 9.4.9, 10.0.3, 10.0.4, 10.2.1 | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
Showing elements 121 - 140 out of 570