Known vulnerabilities in Splunk User Behavior Analytics (UBA)

Vendor: Splunk Inc.
Software: Splunk User Behavior Analytics (UBA)
Software CPE: cpe:2.3:a:splunk:uba:*:*:*:*:*:*:*:*
Website: https://www.splunk.com/
Total vulnerabilities: 40
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk User Behavior Analytics (UBA) Splunk User Behavior Analytics (UBA) is affected by 40 known vulnerabilities: 4 high, 29 medium, 7 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105799 - Integer overflow
CVE-2024-40635		 CWE-190 Low
No
No
 5.4.3 17.03.2025 SB20250317125
SB2025031862
SB2025032001
and 19 more
#VU105459 - Resource exhaustion
CVE-2025-22869		 CWE-400 Low
No
No
 5.4.3 10.03.2025 SB2025031011
SB2025031015
SB2025032557
and 108 more
#VU105450 - Resource exhaustion
CVE-2025-27144		 CWE-400 Medium
No
No
 5.4.3 07.03.2025 SB2025030735
SB2025030736
SB2025030737
and 80 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 5.4.3 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU101829 - Improper Authentication
CVE-2024-56128		 CWE-287 Medium
No
No
 5.4.3 18.12.2024 SB2024121826
SB2025041647
SB2025041651
and 12 more
#VU101386 - Resource exhaustion
CVE-2024-12254		 CWE-400 Medium
No
No
 5.4.3 10.12.2024 SB2024121033
SB2024121034
SB2024121035
and 13 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 5.4.3 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU99567 - Resource exhaustion
CVE-2024-49767		 CWE-400 Medium
No
No
 5.4.3 31.10.2024 SB2024103173
SB2024103176
SB2024110601
and 30 more
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 5.4.3 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 5.4.3 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020		 CWE-918 Medium
No
No
 5.4.3 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 5.4.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 5.4.3 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU88462 - Command injection
CVE-2024-27980		 CWE-77 Medium
No
No
 5.4.3 11.04.2024 SB2024041122
SB2024041155
SB2024041156
and 20 more
#VU88226 - Missing release of memory after effective lifetime
CVE-2024-26461		 CWE-401 Medium
No
No
 5.4.3 09.04.2024 SB2024040939
SB2024040943
SB20240611102
and 46 more
#VU88225 - Missing release of memory after effective lifetime
CVE-2024-26458		 CWE-401 Medium
No
No
 5.4.3 09.04.2024 SB2024040938
SB2024040943
SB20240611102
and 47 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 5.4.3 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 5.4.3 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU80732 - Resource exhaustion
CVE-2023-38039		 CWE-400 Medium
No
No
 5.4.3 13.09.2023 SB2023091327
SB2023091363
SB2023091402
and 33 more
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 5.4.3 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more


Showing elements 1 - 20 out of 40