Known vulnerabilities in Splunk Enterprise 8.2.3

Version: 8.2.3
Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 199
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Splunk Enterprise version 8.2.3 Splunk Enterprise 8.2.3 is affected by 199 vulnerabilities: 11 high, 142 medium, 46 low Critical High Medium Low

Vulnerabilities (199)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83245 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46213
CWE-79 Medium
No
No
9.0.7, 9.1.2 17.11.2023 SB2023111728
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491
CWE-345 High
No
No
8.2.12, 9.0.6, 9.1.1 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.0.8, 9.0.9, 9.1.1, 9.1.3, 9.1.4, 9.2.1 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU70332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-41720
CWE-22 Medium
No
No
8.2.12, 9.0.6, 9.1.1 14.12.2022 SB2022121432
SB2022121433
SB2022121435
and 13 more
#VU69449 - NULL Pointer Dereference
CVE-2020-29652
CWE-476 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.11.2022 SB2020121742
SB2022112104
SB2023010607
and 7 more
#VU69405 - Improper input validation
CVE-2022-41716
CWE-20 Low
No
No
8.2.12, 9.0.6, 9.1.1 17.11.2022 SB2022111727
SB2022111728
SB2022111741
and 32 more
#VU68897 - Resource exhaustion
CVE-2022-32149
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
8.2.12, 9.0.6, 9.1.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68390 - Resource exhaustion
CVE-2022-41715
CWE-400 Medium
No
No
8.2.12, 9.0.6, 9.1.1 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023
CWE-185 Medium
No
No
8.2.12, 9.0.6, 9.1.1 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU65693 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-33194
CWE-835 Medium
No
No
8.2.12, 9.0.6, 9.1.1 22.07.2022 SB2021052653
SB2022072210
SB2022081842
and 16 more
#VU65267 - Improper Certificate Validation
CVE-2022-27536
CWE-295 Medium
No
No
8.2.12, 9.0.6, 9.1.1 13.07.2022 SB2022071328
SB2022080503
SB2023022244
and 7 more
#VU65006 - Out-of-bounds read
CVE-2021-38561
CWE-125 Medium
No
No
8.2.12, 9.0.6, 9.1.1 07.07.2022 SB2022070736
SB2022070742
SB2022071920
and 41 more
#VU64805 - Improper input validation
CVE-2021-43565
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 29.06.2022 SB2021120347
SB2022062928
SB2022072127
and 39 more
#VU56022 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33195
CWE-79 Medium
No
No
8.2.12, 9.0.6, 9.1.1 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 38 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558
CWE-295 Medium
Public exploit available
No
8.2.12, 9.0.6, 9.1.1 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525
CWE-674 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU51486 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27918
CWE-835 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.03.2021 SB2021031515
SB2021071515
SB2021071516
and 18 more
#VU51485 - Improper input validation
CVE-2021-27919
CWE-20 Medium
No
No
8.2.12, 9.0.6, 9.1.1 15.03.2021 SB2021031515
SB2022080503
SB2022090717
and 4 more


Showing elements 1 - 20 out of 199