Splunk, Inc Splunk Enterprise
5 CVEs affecting Splunk, Inc Splunk Enterprise. Latest disclosed: 2022-06-15. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32158 | Critical | 9.0 | 2022-06-15 | Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the… |
CVE-2022-32153 | High | 8.1 | 2022-06-15 | Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates durin… |
CVE-2022-32157 | High | 7.5 | 2022-06-15 | Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles. Remediation requires you to update the depl… |
CVE-2022-32151 | High | 7.4 | 2022-06-15 | The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certifica… |
CVE-2022-32154 | Medium | 6.8 | 2022-06-15 | Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is used in a query in a… |