Known vulnerabilities in Splunk Enterprise 8.0.0

Version: 8.0.0
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 8.0.0 Splunk Enterprise 8.0.0 is affected by 15 vulnerabilities: 9 medium, 6 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46213
CWE-79 Medium
No
No
9.0.7, 9.1.2 17.11.2023 SB2023111728
#VU72379 - Improper input validation
CVE-2023-22937
CWE-20 Low
No
No
8.1.13, 8.2.10, 9.0.4 20.02.2023 SB2023022005
#VU68951 - Resource exhaustion
CVE-2022-43572
CWE-400 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68950 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-43571
CWE-94 Medium
Public exploit available
Exploited
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68949 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-43570
CWE-611 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68948 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43569
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43568
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68946 - Deserialization of Untrusted Data
CVE-2022-43567
CWE-502 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68945 - Cross-Site Request Forgery (CSRF)
CVE-2022-43566
CWE-352 Medium
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68944 - Cross-Site Request Forgery (CSRF)
CVE-2022-43565
CWE-352 Medium
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68943 - Resource exhaustion
CVE-2022-43564
CWE-400 Low
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68942 - Cross-Site Request Forgery (CSRF)
CVE-2022-43563
CWE-352 Medium
No
No
8.1.12, 8.2.9 02.11.2022 SB2022110255
#VU68941 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2022-43562
CWE-644 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU68940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43561
CWE-79 Low
No
No
8.1.12, 8.2.9, 9.0.2 02.11.2022 SB2022110255
#VU61799 - Out-of-bounds write
CVE-2020-36518
CWE-787 Medium
No
No
8.1.12, 8.2.9, 9.0.2 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more