Latest vulnerabilities for "splunk universal forwarder"

Splunk Universal ForwarderIncorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade

Risk 71

Severity

8

First published (updated )

CVE-2025-20298

Splunk Universal ForwarderUse After Free, Double Free

Risk 45

Severity

7.5

First published (updated )

CVE-2023-27537

Splunk Universal ForwardercURL libcurl could allow a local attacker to bypass security restrictions, caused by a SSH connectio…

Risk 59

Severity

7.7

First published (updated )

CVE-2023-27538

Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a GSS delegati…

Risk 37

Severity

5.9

First published (updated )

CVE-2023-27536

Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a FTP too eage…

Risk 37

Severity

5.9

First published (updated )

CVE-2023-27535

Splunk Universal ForwarderPath Traversal

Risk 83

Severity

8.8

First published (updated )

CVE-2023-27534

Splunk Universal ForwarderInput Validation

Risk 90

Severity

9.8

First published (updated )

CVE-2023-27533

IBM Cloud Pak for Business AutomationcURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…

Risk 45

Severity

7.5

First published (updated )

CVE-2023-23916

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Risk 46

Severity

7.5

First published (updated )

CVE-2023-23915

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Risk 70

Severity

9.1

First published (updated )

CVE-2023-23914

Microsoft Windows 10Use After Free, Buffer Overflow, Input Validation

Risk 38

Severity

5.9

First published (updated )

CVE-2022-43552

Splunk Universal ForwarderBuffer Overflow, Input Validation

Risk 46

Severity

7.5

First published (updated )

CVE-2022-43551

Splunk Universal Forwardercurl. Multiple issues were addressed by updating to curl version 7.86.0.

Risk 39

Severity

6.5

First published (updated )

CVE-2022-35260

Splunk Universal ForwarderNull Pointer Dereference

Risk 90

Severity

9.8

First published (updated )

CVE-2022-36227

Fedoraproject Fedoracurl. Multiple issues were addressed by updating to curl version 7.86.0.

Risk 46

Severity

7.5

First published (updated )

CVE-2022-42916

Fedoraproject FedoraDouble Free

Risk 79

Severity

8.1

First published (updated )

CVE-2022-42915

redhat/curlInfoleak

Risk 90

Severity

9.8

First published (updated )

CVE-2022-32221

redhat/curlInput Validation

Risk 21

Severity

3.7

First published (updated )

CVE-2022-35252

Splunk splunkMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input

Risk 32

Severity

5.5

First published (updated )

CVE-2022-37439

Microsoft Windows 10SQL Injection, Out-of-bounds Read

Risk 46

Severity

7.5

First published (updated )

CVE-2022-35737

Splunk Universal ForwarderInput Validation

Risk 23

Severity

4.3

First published (updated )

CVE-2022-32205

redhat/curlInput Validation

Risk 37

Severity

5.9

First published (updated )

CVE-2022-32208

Splunk Universal ForwarderInput Validation

Risk 90

Severity

9.8

First published (updated )

CVE-2022-32207

redhat/curlInput Validation

Risk 39

Severity

6.5

First published (updated )

CVE-2022-32206

Splunk splunkSplunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation

Risk 75

Severity

8.1

First published (updated )

CVE-2022-32156

Splunk Universal ForwarderA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `-…

Risk 59

Severity

8.1

First published (updated )

CVE-2022-27778

Splunk Universal ForwarderSSRF

Risk 43

Severity

7.5

First published (updated )

CVE-2022-27780

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure cle…

Risk 22

Severity

4.3

First published (updated )

CVE-2022-30115

Splunk Universal Forwarderlibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided wi…

Risk 27

Severity

5.3

First published (updated )

CVE-2022-27779

Splunk Universal Forwarderlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been ch…

Risk 43

Severity

7.5

First published (updated )

CVE-2022-27782

Trending

Versions

Splunk Universal ForwarderIncorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade

Splunk Universal ForwarderUse After Free, Double Free

Splunk Universal ForwardercURL libcurl could allow a local attacker to bypass security restrictions, caused by a SSH connectio…

Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a GSS delegati…

Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a FTP too eage…

Don't miss critical vulnerabilities

Splunk Universal ForwarderPath Traversal

Splunk Universal ForwarderInput Validation

IBM Cloud Pak for Business AutomationcURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Don't miss critical vulnerabilities

Microsoft Windows 10Use After Free, Buffer Overflow, Input Validation

Splunk Universal ForwarderBuffer Overflow, Input Validation

Splunk Universal Forwardercurl. Multiple issues were addressed by updating to curl version 7.86.0.

Splunk Universal ForwarderNull Pointer Dereference

Fedoraproject Fedoracurl. Multiple issues were addressed by updating to curl version 7.86.0.

Don't miss critical vulnerabilities

Fedoraproject FedoraDouble Free

redhat/curlInfoleak

redhat/curlInput Validation

Splunk splunkMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input

Microsoft Windows 10SQL Injection, Out-of-bounds Read

Don't miss critical vulnerabilities

Splunk Universal ForwarderInput Validation

redhat/curlInput Validation

Splunk Universal ForwarderInput Validation

redhat/curlInput Validation

Splunk splunkSplunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation

Don't miss critical vulnerabilities

Splunk Universal ForwarderA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `-…

Splunk Universal ForwarderSSRF

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure cle…

Splunk Universal Forwarderlibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided wi…

Splunk Universal Forwarderlibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been ch…

Don't miss critical vulnerabilities

Company

Resources

Contact