Known vulnerabilities in Splunk User Behavior Analytics (UBA) - page 2

Vendor: Splunk Inc.
Software: Splunk User Behavior Analytics (UBA)
Software CPE: cpe:2.3:a:splunk:uba:*:*:*:*:*:*:*:*
Website: https://www.splunk.com/
Total vulnerabilities: 40
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk User Behavior Analytics (UBA) Splunk User Behavior Analytics (UBA) is affected by 40 known vulnerabilities: 4 high, 29 medium, 7 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108090 - NULL Pointer Dereference
CVE-2023-5590		 CWE-476 High
No
No
 5.4.3 30.04.2025 SB2023101501
SB2025043033
SB2025073178
and 1 more
#VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43800		 CWE-79 Medium
No
No
 5.4.2 08.10.2024 SB2024100821
SB2024100824
SB2024100825
and 48 more
#VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43799		 CWE-79 Low
No
No
 5.4.2 30.09.2024 SB2024093022
SB2024100824
SB2024100825
and 50 more
#VU97209 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43796		 CWE-79 Medium
No
No
 5.4.2 12.09.2024 SB2024091250
SB2024091251
SB2024091252
and 52 more
#VU97208 - Asymmetric Resource Consumption (Amplification)
CVE-2024-45590		 CWE-405 Medium
Available
No
 5.4.2 12.09.2024 SB2024091249
SB2024091251
SB2024091252
and 59 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 5.4.2 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 5.4.2 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 5.4.2 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 5.4.2 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 5.4.2 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU78488 - Uncaught Exception
CVE-2023-32695		 CWE-248 Medium
No
No
 5.2.1, 5.3.0 21.07.2023 SB2023072118
SB2023092226
SB2024010967
and 4 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 5.2.1, 5.3.0 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 5.4.2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71377 - Improper input validation
CVE-2022-40898		 CWE-20 Medium
No
No
 5.4.2 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71253 - Improper input validation
CVE-2022-3510		 CWE-20 Medium
No
No
 5.2.1, 5.3.0 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU70097 - Heap-based Buffer Overflow
CVE-2015-5237		 CWE-122 High
No
No
 5.2.1, 5.3.0 10.12.2022 SB2017092512
SB2023011801
SB2023042744
and 7 more
#VU69670 - Improper input validation
CVE-2022-3509		 CWE-20 Medium
No
No
 5.2.1, 5.3.0 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 5.2.1, 5.3.0 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 5.4.2 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-11236		 CWE-93 Medium
Available
No
 5.4.2 26.03.2020 SB2020032626
SB2020031827
SB2019091504
and 36 more


Showing elements 21 - 40 out of 40