Known vulnerabilities in Splunk Universal Forwarder - page 2
Vendor:
Splunk Inc.
Software:
Splunk Universal Forwarder
Software CPE:
cpe:2.3:a:splunk:splunk_universal_forwarder:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
97
Public exploits:
7
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.4.14
10.0.9
10.2.6
10.4.2
9.4.13
9.4.12
10.0.8
10.0.7
10.2.5
10.2.4
10.4.1
10.4.0
10.2.2
10.0.5
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
9.3.10
9.4.9
10.0.4
10.2.1
10.2.0
9.4.7
9.2.11
9.2.12
9.3.9
9.4.8
10.0.3
10.0.2
9.4.6
9.3.8
9.2.10
9.4.4
9.3.6
9.2.8
9.2.9
9.3.7
9.4.5
10.0.0
10.0.1
9.1.10
9.2.7
9.3.5
9.4.3
1.0.2
9.4.2
9.3.4
9.2.6
9.1.9
1.0.1
9.4.1
9.3.3
9.2.5
9.1.8
1.0.0
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.3.0
9.2.2
9.1.5
9.0.10
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
9.0.4
9.0.3
9.0.2
9.0.0
8.2.11
8.2.10
8.2.9
8.2.8
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3.1
8.2.3
8.2.2
8.2.1
8.2.0
8.1.14
8.1.13
8.1.12
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.13
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
8.1.11
8.2.7.1
9.0.1
6.1.3
6.1.2
6.1.1
6.1.0
Vulnerabilities (97)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105459 - Resource exhaustion CVE-2025-22869 |
CWE-400 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 10.03.2025 |
SB2025031011 SB2025031015 SB2025032557 and 108 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU101816 - Insufficient Verification of Data Authenticity CVE-2024-53259 |
CWE-345 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 17.12.2024 |
SB2024121770 SB2024121771 SB2025012135 and 5 more |
||
| #VU101777 - Improper Authorization CVE-2024-45337 |
CWE-285 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 13.12.2024 |
SB2024121332 SB2024121333 SB2024121334 and 93 more |
||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | 9.1.7, 9.2.4, 9.3.2 | 27.06.2024 |
SB2024062720 SB20240717135 SB2024072154 and 157 more |
||
| #VU91160 - Improper input validation CVE-2024-24790 |
CWE-20 | Medium | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 90 more |
||
| #VU91159 - Improper input validation CVE-2024-24789 |
CWE-20 | Low | 9.1.9, 9.2.6, 9.3.4, 9.4.2 | 05.06.2024 |
SB2024060520 SB2024060635 SB2024060729 and 78 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 9.0.7, 9.1.2 | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 9.0.7, 9.1.2 | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU72618 - Improper input validation CVE-2023-24329 |
CWE-20 | Medium | 9.0.7, 9.1.2 | 28.02.2023 |
SB2023022819 SB2023022822 SB2023030832 and 158 more |
||
| #VU72336 - Cleartext Transmission of Sensitive Information CVE-2023-23915 |
CWE-319 | Medium | 8.1.14, 8.2.11, 9.0.5 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 26 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 8.1.14, 8.2.11, 9.0.5 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 8.1.14, 8.2.11, 9.0.5 | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68747 - Stack-based buffer overflow CVE-2022-35260 |
CWE-121 | Low | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 17 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU64681 - Resource exhaustion CVE-2022-32205 |
CWE-400 | Medium | 8.1.14, 8.2.11, 9.0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 32 more |
||
| #VU63912 - Security Features CVE-2022-31799 |
CWE-254 | Medium | 9.0.7, 9.1.2 | 01.06.2022 |
SB2022060117 SB2022061201 SB2022072635 and 13 more |
||
| #VU63005 - Exposure of sensitive information to an unauthorized actor CVE-2022-27779 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072605 and 9 more |
Showing elements 21 - 40 out of 97