Known vulnerabilities in Splunk Enterprise - page 8
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
570
Public exploits:
25
Known exploited (KEV):
5
Breakdown by Severity Chart
9.4.16
10.0.11
10.2.8
10.4.4
9.4.15
10.0.10
10.2.7
10.4.3
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (570)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120254 - Improper Handling of Length Parameter Inconsistency CVE-2025-14847 |
CWE-130 | High | 9.2.12, 9.3.9, 9.4.8, 10.0.3, 10.2.0 | 23.12.2025 |
SB2025122318 SB2026011607 SB2026012973 and 9 more |
||
| #VU119140 - Improper Access Control CVE-2025-20383 |
CWE-284 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119139 - Improper input validation CVE-2025-20389 |
CWE-20 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120435 |
||
| #VU119120 - Server-Side Request Forgery (SSRF) CVE-2025-20388 |
CWE-918 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119119 - Incorrect Permission Assignment for Critical Resource CVE-2025-20386 |
CWE-732 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20385 |
CWE-79 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU119117 - Improper Output Neutralization for Logs CVE-2025-20384 |
CWE-117 | Medium | 9.2.10, 9.3.8, 9.4.6, 10.0.1 | 04.12.2025 |
SB2025120404 |
||
| #VU119116 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20382 |
CWE-601 | Low | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 04.12.2025 |
SB2025120404 |
||
| #VU118468 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-20378 |
CWE-601 | Low | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU118466 - Improper Access Control CVE-2025-20379 |
CWE-284 | Medium | 9.2.9, 9.3.7, 9.4.5, 10.0.1 | 13.11.2025 |
SB2025111308 |
||
| #VU116648 - Server-Side Request Forgery (SSRF) CVE-2025-20371 |
CWE-918 | Medium | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 07.10.2025 |
SB2025100708 |
||
| #VU116647 - Resource exhaustion CVE-2025-20370 |
CWE-400 | Low | 9.2.8, 9.3.6, 9.4.4, 10.0.1 | 07.10.2025 |
SB2025100708 |
||
| #VU116646 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-20369 |
CWE-611 | Medium | 9.2.8, 9.3.6, 9.4.4 | 07.10.2025 |
SB2025100708 |
||
| #VU116645 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-20368 |
CWE-79 | Low | 9.2.8, 9.3.6, 9.4.4 | 07.10.2025 |
SB2025100708 |
||
| #VU116213 - Out-of-bounds write CVE-2025-9230 |
CWE-787 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 01.10.2025 |
SB2025100119 SB2025100132 SB2025100133 and 108 more |
||
| #VU113118 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27210 |
CWE-22 | Low | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 22.07.2025 |
SB2025072233 SB2025082103 SB2025091525 and 6 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU112106 - Memory corruption CVE-2025-52999 |
CWE-119 | Medium | 9.2.8, 9.2.9, 9.3.6, 9.3.7, 9.4.4, 9.4.5, 10.0.1 | 02.07.2025 |
SB2025070257 SB2025070261 SB2025070262 and 43 more |
||
| #VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
CWE-22 | High | 9.2.10, 9.3.8, 9.4.6, 10.0.2 | 27.05.2025 |
SB2025052721 SB2025052734 SB2025052736 and 112 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 9.2.12, 9.3.9, 9.4.8, 10.0.3 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 31 more |
Showing elements 141 - 160 out of 570