Known vulnerabilities in Splunk Enterprise - page 9

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 472
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 472 known vulnerabilities: 28 high, 292 medium, 152 low Critical High Medium Low

Vulnerabilities (472)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98544 - Resource exhaustion
CVE-2023-50658
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 15.10.2024 SB2024101517
SB2024101524
SB2024101547
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88184 - Resource exhaustion
CVE-2023-45288
CWE-400 Medium
Available
No
9.1.6, 9.2.3, 9.3.1 05.04.2024 SB2024040533
SB2024040549
SB2024040551
and 187 more
#VU84618 - Improper input validation
CVE-2023-26125
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 20.12.2023 SB2023122044
SB2023122139
SB2024030742
and 6 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
9.1.6, 9.2.3, 9.3.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83929 - Missing Encryption of Sensitive Data
CVE-2023-45285
CWE-311 Medium
No
No
9.1.6, 9.2.3, 9.3.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 28 more
#VU83928 - Resource exhaustion
CVE-2023-39326
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83255 - Improper input validation
CVE-2023-45283
CWE-20 Low
No
No
9.1.6, 9.2.3, 9.3.1 17.11.2023 SB2023111740
SB2023111741
SB2023111742
and 20 more
#VU82064 - Resource exhaustion
CVE-2023-39325
CWE-400 Medium
No
No
9.1.6, 9.2.3, 9.3.1 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU80818 - Download of Code Without Integrity Check
CVE-2023-29401
CWE-494 Low
No
No
9.1.6, 9.2.3, 9.3.1 15.09.2023 SB2023091511
SB2023113021
SB2023122139
and 6 more
#VU80575 - Improper input validation
CVE-2023-39322
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 51 more
#VU80574 - Improper input validation
CVE-2023-39321
CWE-20 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091875
SB2023091876
and 52 more
#VU80573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39319
CWE-79 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 62 more
#VU80572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-39318
CWE-79 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 61 more
#VU80571 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39320
CWE-94 Medium
No
No
9.1.6, 9.2.3, 9.3.1 08.09.2023 SB2023090845
SB2023091146
SB2023091875
and 15 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978
CWE-79 Low
No
No
9.1.6, 9.2.3, 9.3.1 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 53 more
#VU50394 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-36227
CWE-835 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50395 - Integer underflow
CVE-2020-36228
CWE-191 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 13 more
#VU50397 - Reachable Assertion
CVE-2020-36230
CWE-617 Medium
No
No
9.1.6, 9.2.3, 9.3.1 26.01.2021 SB2021020601
SB2021020602
SB2021052415
and 15 more
#VU19562 - Improper Authorization
CVE-2019-13565
CWE-285 Low
No
No
9.1.6, 9.2.3, 9.3.1 30.07.2019 SB2019073001
SB2019092405
SB2019092417
and 5 more


Showing elements 161 - 180 out of 472