Known vulnerabilities in Splunk Enterprise - page 8

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101661 - Exposure of sensitive information to an unauthorized actor
CVE-2024-53245
CWE-200 Low
No
No
9.1.7, 9.2.4 11.12.2024 SB2024121145
SB2024121146
#VU101660 - Exposure of sensitive information to an unauthorized actor
CVE-2024-53246
CWE-200 Low
No
No
9.1.7, 9.2.4, 9.3.2 11.12.2024 SB2024121143
SB2024121144
#VU101655 - Deserialization of Untrusted Data
CVE-2024-53247
CWE-502 Medium
No
No
9.1.7, 9.2.4, 9.3.2 11.12.2024 SB2024121140
SB2024121141
#VU99350 - Missing release of memory after effective lifetime
CVE-2024-36114
CWE-401 Medium
No
No
9.1.7, 9.2.4, 9.3.2 25.10.2024 SB2024102535
SB2024121139
SB2025012230
and 5 more
#VU98132 - Inefficient Regular Expression Complexity
CVE-2024-45296
CWE-1333 Low
No
No
9.1.7, 9.2.4, 9.3.2 08.10.2024 SB2024100822
SB2024100823
SB2024100826
and 87 more
#VU97689 -
CVE-2024-6531
Medium
No
No
9.1.7, 9.2.4, 9.3.2 25.09.2024 SB2024092513
SB2024121139
SB2025031910
and 7 more
#VU97606 - Improper Verification of Cryptographic Signature
CVE-2024-42459
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 23 more
#VU97605 - Improper Verification of Cryptographic Signature
CVE-2024-42460
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU97604 - Improper Verification of Cryptographic Signature
CVE-2024-42461
CWE-347 Medium
No
No
9.1.7, 9.2.4, 9.3.2 19.09.2024 SB2024091934
SB2024091939
SB2024092062
and 24 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
9.1.7, 9.2.4, 9.3.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067
CWE-185 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU91596 - Memory corruption
CVE-2024-36129
CWE-119 High
No
No
9.1.7, 9.2.4, 9.3.2 10.06.2024 SB2024061020
SB2024061021
SB2024061741
and 2 more
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
9.1.7, 9.2.4, 9.3.2 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more
#VU83254 - Improper input validation
CVE-2023-45284
CWE-20 Low
No
No
9.1.6, 9.2.3, 9.3.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 18 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531
CWE-295 Medium
No
No
9.1.7, 9.2.4, 9.3.2 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU50779 - Reachable Assertion
CVE-2021-27212
CWE-617 Medium
No
No
9.1.6, 9.2.3, 9.3.1 17.02.2021 SB2021021717
SB2021022225
SB2021022613
and 13 more
#VU19561 - Improper Authorization
CVE-2019-13057
CWE-285 Low
No
No
9.1.6, 9.2.3, 9.3.1 30.07.2019 SB2019073001
SB2019092405
SB2019092417
and 2 more
#VU16671 - Stack-based buffer overflow
CVE-2017-17740
CWE-121 Low
No
No
9.1.6, 9.2.3, 9.3.1 24.12.2018 SB2019092405
SB2019092417
SB2018051303
and 1 more
#VU31918 - Improper Initialization
CVE-2017-14159
CWE-665 Medium
No
No
9.1.6, 9.2.3, 9.3.1 05.09.2017 SB2018051302
SB2024101547


Showing elements 141 - 160 out of 472