Splunk, Inc Splunk Enterprise
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-32158 | 9.0 – < 9.0 ; 8.2 – < 8.2.6.1 ; 8.1 – < 8.1.10.1 | Splunk Enterprise deployment servers allow client publishing of forwarder bundles | CRITICAL 10.0 | 1.5 % | ||
| CVE-2022-32157 | 9.0 – < 9.0 | Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads | HIGH 7.5 | 1.4 % | ||
| CVE-2022-32154 | 9.0 – < 9.0 | Risky commands warnings in Splunk Enterprise Dashboards | HIGH 8.1 | 1.4 % | ||
| CVE-2022-32153 | 9.0 – < 9.0 | Splunk Enterprise lacked TLS host name validation | HIGH 8.1 | 0.9 % | ||
| CVE-2022-32151 | 9.0 – < 9.0 | Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default | CRITICAL 9.1 | 0.8 % |