Splunk, Inc

Products

Exploited and recent CVEs

• CVE-2022-32158 Critical 9.0 Splunk Enterprise deployment servers allow client publishing of forwarder bundles 1.5%
• CVE-2022-32157 High 7.5 Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads 1.4%
• CVE-2022-32155 Unrated Universal Forwarder management services allows remote login by default 2.0%
• CVE-2022-32154 Medium 6.8 Risky commands warnings in Splunk Enterprise Dashboards 1.5%
• CVE-2022-32154 Medium 6.8 Risky commands warnings in Splunk Enterprise Dashboards 1.5%
• CVE-2022-32153 High 8.1 Splunk Enterprise lacked TLS host name validation 0.9%
• CVE-2022-32153 High 8.1 Splunk Enterprise lacked TLS host name validation 0.9%
• CVE-2022-32151 High 7.4 Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default 0.8%
• CVE-2022-32151 High 7.4 Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default 0.8%