Known vulnerabilities in Splunk Universal Forwarder - page 3
Vendor:
Splunk Inc.
Software:
Splunk Universal Forwarder
Software CPE:
cpe:2.3:a:splunk:splunk_universal_forwarder:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
97
Public exploits:
7
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.4.14
10.0.9
10.2.6
10.4.2
9.4.13
9.4.12
10.0.8
10.0.7
10.2.5
10.2.4
10.4.1
10.4.0
10.2.2
10.0.5
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
9.3.10
9.4.9
10.0.4
10.2.1
10.2.0
9.4.7
9.2.11
9.2.12
9.3.9
9.4.8
10.0.3
10.0.2
9.4.6
9.3.8
9.2.10
9.4.4
9.3.6
9.2.8
9.2.9
9.3.7
9.4.5
10.0.0
10.0.1
9.1.10
9.2.7
9.3.5
9.4.3
1.0.2
9.4.2
9.3.4
9.2.6
9.1.9
1.0.1
9.4.1
9.3.3
9.2.5
9.1.8
1.0.0
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.3.0
9.2.2
9.1.5
9.0.10
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
9.0.4
9.0.3
9.0.2
9.0.0
8.2.11
8.2.10
8.2.9
8.2.8
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3.1
8.2.3
8.2.2
8.2.1
8.2.0
8.1.14
8.1.13
8.1.12
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.10
7.1.9
7.1.8
7.1.7
7.1.6
7.1.5
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.13
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
8.1.11
8.2.7.1
9.0.1
6.1.3
6.1.2
6.1.1
6.1.0
Vulnerabilities (97)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 8.1.14, 8.2.11, 9.0.5 | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 8.1.14, 8.2.11, 9.0.5 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 8.1.14, 8.2.11, 9.0.5 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 8.1.14, 8.2.11, 9.0.5 | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 8.1.14, 8.2.11, 9.0.5 | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
||
| #VU68829 - Resource Management Errors CVE-2022-40304 |
CWE-399 | Medium | 8.1.14, 8.2.11, 9.0.5 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 90 more |
||
| #VU68828 - Integer overflow CVE-2022-40303 |
CWE-190 | High | 8.1.14, 8.2.11, 9.0.5 | 30.10.2022 |
SB2022103005 SB2022103006 SB2022103007 and 88 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68747 - Stack-based buffer overflow CVE-2022-35260 |
CWE-121 | Low | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 17 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 8.1.14, 8.2.11, 9.0.5 | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 8.1.14, 8.2.11, 9.0.5 | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 8.1.14, 8.2.11, 9.0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 8.1.14, 8.2.11, 9.0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 8.1.14, 8.2.11, 9.0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64681 - Resource exhaustion CVE-2022-32205 |
CWE-400 | Medium | 8.1.14, 8.2.11, 9.0.5 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 32 more |
||
| #VU63011 - Cleartext Transmission of Sensitive Information CVE-2022-30115 |
CWE-319 | Low | 8.1.14, 8.2.11, 9.0.5 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072605 and 11 more |
||
| #VU63009 - Incorrect Implementation of Authentication Algorithm CVE-2022-27782 |
CWE-303 | Medium | 8.1.14, 8.2.11, 9.0.5 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 68 more |
||
| #VU63005 - Exposure of sensitive information to an unauthorized actor CVE-2022-27779 |
CWE-200 | Low | 8.1.14, 8.2.11, 9.0.5 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072605 and 9 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 8.1.14, 8.2.11, 9.0.5 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
Showing elements 41 - 60 out of 97