Splunk Splunk Cloud Platform
86 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-20298 | 10.5.2605 – < 10.5.2605.0 ; 10.4.2604 – < 10.4.2604.6 ; 10.3.2512 – < 10.3.2512.15 ; … | Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-20296 | 10.5.2605 – < 10.5.2605.0 ; 10.4.2604 – < 10.4.2604.7 ; 10.3.2512 – < 10.3.2512.16 ; … | SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise | HIGH 8.3 | 0.2 % | ||
| CVE-2026-20297 | 10.5.2605 – < 10.5.2605.0 ; 10.4.2604 – < 10.4.2604.6 ; 10.2.2510 – < 10.2.2510.18 ; … | Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise | HIGH 7.2 | 0.6 % | ||
| CVE-2026-20258 | 10.3.2512 – < 10.3.2512.11 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise | HIGH 7.1 | 0.2 % | ||
| CVE-2026-20252 | 10.4.2604 – < 10.4.2604.3 ; 10.3.2512 – < 10.3.2512.12 ; 10.2.2510 – < 10.2.2510.14 ; … | Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise | HIGH 7.6 | 0.3 % | ||
| CVE-2026-20257 | 10.3.2512 – < 10.3.2512.13 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-20259 | 10.3.2512 – < 10.3.2512.12 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Improper Access Control in Splunk Enterprise | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-20255 | 10.3.2512 – < 10.3.2512.13 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Improper Input Validation through Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20251 | 10.3.2512 – < 10.3.2512.12 ; 10.2.2510 – < 10.2.2510.14 ; 10.1.2507 – < 10.1.2507.22 ; … | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway | HIGH 8.8 | 32 % | ||
| CVE-2026-20254 | 10.3.2512 – < 10.3.2512.13 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Information Disclosure through External Content Restriction Bypass in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20256 | 10.3.2512 – < 10.3.2512.13 ; 10.2.2510 – < 10.2.2510.15 ; 10.1.2507 – < 10.1.2507.23 ; … | Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20239 | 10.3.2512 – < 10.3.2512.8 ; 10.2.2510 – < 10.2.2510.11 ; 10.1.2507 – < 10.1.2507.21 ; … | Sensitive Information Disclosure through Log Files in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-20240 | 10.4.2603 – < 10.4.2603.1 ; 10.3.2512 – < 10.3.2512.9 ; 10.2.2510 – < 10.2.2510.11 ; … | Denial of Service through coldToFrozen.sh Script in Splunk Enterprise | HIGH 7.1 | 0.4 % | ||
| CVE-2026-20203 | 10.4.2603 – < Not Affected ; 10.3.2512 – < 10.3.2512.6 ; 10.2.2510 – < 10.2.2510.10 ; … | Improper Access Control in Data Model Acceleration in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20204 | 10.4.2603 – < Not Affected ; 10.3.2512 – < 10.3.2512.5 ; 10.2.2510 – < 10.2.2510.9 ; … | Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise | HIGH 7.1 | 3.1 % | ||
| CVE-2026-20202 | 10.4.2603 – < Not Affected ; 10.3.2512 – < 10.3.2512.6 ; 10.2.2510 – < 10.2.2510.10 ; … | Improper Input Validation during User Account Creation in Splunk Enterprise | MEDIUM 6.6 | 0.2 % | ||
| CVE-2026-20163 | 10.2.2510 – < 10.2.2510.5 ; 10.0.2503 – < 10.0.2503.12 ; 10.1.2507 – < 10.1.2507.16 ; … | Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise | HIGH 8.0 | 0.5 % | ||
| CVE-2026-20162 | 10.2.2510 – < 10.2.2510.4 ; 10.1.2507 – < 10.1.2507.15 ; 10.0.2503 – < 10.0.2503.11 ; … | Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-20166 | 10.2.2510 – < 10.2.2510.5 ; 10.1.2507 – < 10.1.2507.16 ; 10.0.2503 – < 10.0.2503.12 | Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20164 | 10.2.2510 – < 10.2.2510.5 ; 10.1.2507 – < 10.1.2507.16 ; 10.0.2503 – < 10.0.2503.11 ; … | Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20165 | 10.2.2510 – < 10.2.2510.7 ; 10.1.2507 – < 10.1.2507.17 ; 10.0.2503 – < 10.0.2503.12 ; … | Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20139 | 10.2.2510 – < 10.2.2510.3 ; 10.1.2507 – < 10.1.2507.8 ; 10.0.2503 – < 10.0.2503.9 ; … | Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise | MEDIUM 4.3 | 5.7 % | ||
| CVE-2026-20144 | 10.1.2507 – < 10.1.2507.11 ; 10.0.2503 – < 10.0.2503.9 ; 9.3.2411 – < 9.3.2411.120 | Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20137 | 10.1.2507 – < 10.1.2507.0 ; 10.0 – < 10.0.2503.9 ; 9.3.2411 – < 9.3.2411.112 ; … | Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2025-20388 | 10.1.2507 – < 10.1.2507.4 ; 10.0.2503 – < 10.0.2503.6 ; 9.3.2411 – < 9.3.2411.116 | Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise | LOW 2.7 | 0.4 % | ||
| CVE-2025-20389 | 10.1.2507 – < 10.1.2507.6 ; 10.0.2503 – < 10.0.2503.8 ; 9.3.2411 – < 9.3.2411.120 | Improper Input Validation in "label" column field in Splunk Secure Gateway App | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20383 | 10.1.2507 – < 10.1.2507.6 ; 10.0.2503 – < 10.0.2503.8 ; 9.3.2411 – < 9.3.2411.120 | Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20384 | 10.1.2507 – < 10.1.2507.4 ; 10.0.2503 – < 10.0.2503.6 ; 9.3.2411 – < 9.3.2411.117 | Unauthenticated Log Injection in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20385 | 10.1.2507 – < 10.1.2507.6 ; 10.0.2503 – < 10.0.2503.7 ; 9.3.2411 – < 9.3.2411.117 | Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20382 | 10.1.2507 – < 10.1.2507.10 ; 10.0.2503 – < 10.0.2503.8 ; 9.3.2411 – < 9.3.2411.120 | URL validation bypass through Views Dashboard in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20379 | 9.3.2411 – < 9.3.2411.116 ; 9.3.2408 – < 9.3.2408.124 ; 10.0.2503 – < 10.0.2503.5 ; … | Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise | LOW 3.5 | 0.3 % | ||
| CVE-2025-20378 | 10.0.2503 – < 10.0.2503.5 ; 9.3.2411 – < 9.3.2411.111 ; 9.3.2408 – < 9.3.2408.121 | Open Redirect on Web Login endpoint in Splunk Enterprise | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-20368 | 9.3.2411 – < 9.3.2411.108 ; 9.3.2408 – < 9.3.2408.118 ; 9.2.2406 – < 9.2.2406.123 | Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2025-20371 | 9.3.2411 – < 9.3.2411.109 ; 9.3.2408 – < 9.3.2408.119 ; 9.2.2406 – < 9.2.2406.122 | Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise | HIGH 8.8 | 0.5 % | ||
| CVE-2025-20367 | 9.3.2411 – < 9.3.2411.109 ; 9.3.2408 – < 9.3.2408.119 ; 9.2.2406 – < 9.2.2406.122 | Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2025-20366 | 9.3.2411 – < 9.3.2411.111 ; 9.3.2408 – < 9.3.2408.119 ; 9.2.2406 – < 9.2.2406.122 | Improper Access Control in Background Job Submission in Splunk Enterprise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20369 | 9.3.2411 – < 9.3.2411.108 ; 9.3.2408 – < 9.3.2408.118 ; 9.2.2406 – < 9.2.2406.123 | Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-20325 | 9.3.2411 – < 9.3.2411.103 ; 9.3.2408 – < 9.3.2408.113 ; 9.2.2406 – < 9.2.2406.119 | Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20300 | 9.3.2411 – < 9.3.2411.103 ; 9.3.2408 – < 9.3.2408.112 ; 9.2.2406 – < 9.2.2406.119 | Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20297 | 9.3.2411 – < 9.3.2411.102 ; 9.3.2408 – < 9.3.2408.111 ; 9.2.2406 – < 9.2.2406.118 | Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component | MEDIUM 5.4 | 29 % | ||
| CVE-2025-20232 | 9.3.2408 – < 9.3.2408.103 ; 9.2.2406 – < 9.2.2406.108 ; 9.2.2403 – < 9.2.2403.113 ; … | Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.5 % | ||
| CVE-2025-20229 | 9.3.2408 – < 9.3.2408.104 ; 9.2.2406 – < 9.2.2406.108 ; 9.2.2403 – < 9.2.2403.114 ; … | Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise | HIGH 8.0 | 16 % | ||
| CVE-2025-20228 | 9.2.2403 – < 9.2.2403.108 ; 9.1.2312 – < 9.1.2312.204 | Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20227 | 9.3.2408 – < 9.3.2408.107 ; 9.2.2406 – < 9.2.2406.113 ; 9.2.2403 – < 9.2.2403.115 ; … | Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio | MEDIUM 4.3 | 0.4 % | ||
| CVE-2025-20226 | 9.3.2408 – < 9.3.2408.107 ; 9.2.2406 – < 9.2.2406.111 ; 9.1.2308 – < 9.1.2308.214 | Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.5 % | ||
| CVE-2024-53244 | 9.2.2406 – < 9.2.2406.107 ; 9.2.2403 – < 9.2.2403.109 ; 9.1.2312 – < 9.1.2312.206 | Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter | MEDIUM 5.7 | 0.5 % | ||
| CVE-2024-53246 | 9.3.2408 – < 9.3.2408.101 ; 9.2.2406 – < 9.2.2406.106 ; 9.2.2403 – < 9.2.2403.111 ; … | Sensitive Information Disclosure through SPL commands | HIGH 7.5 | 0.3 % | ||
| CVE-2024-53245 | 9.1.2312 – < 9.1.2312.206 | Information Disclosure due to Username Collision with a Role that has the same Name as the User | MEDIUM 4.3 | 0.4 % | ||
| CVE-2024-45737 | 9.2.2403 – < 9.2.2403.108 ; 9.1.2312 – < 9.1.2312.204 | Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-45732 | 9.2.2403 – < 9.2.2403.103 ; 9.1.2312 – < 9.1.2312.110, 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.208 | Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app | HIGH 7.1 | 0.4 % | ||
| CVE-2024-45736 | 9.2.2403 – < 9.2.2403.107 ; 9.1.2312 – < 9.1.2312.204 ; 9.1.2312 – < 9.1.2312.111 | Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-45741 | 9.2.2403 – < 9.2.2403.108 ; 9.1.2312 – < 9.1.2312.205 | Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise | MEDIUM 5.4 | 15 % | ||
| CVE-2024-45740 | 9.2.2403 – < 9.2.2403.100 | Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-36997 | 9.1.2312 – < 9.1.2312.100 | Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint | HIGH 8.1 | 0.5 % | ||
| CVE-2024-36993 | 9.1.2312 – < 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.207 | Persistent Cross-site Scripting (XSS) in Web Bulletin | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-36995 | 9.1.2312 – < 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.207 | Low-privileged user could create experimental items | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-36982 | 9.1.2312 – < 9.1.2312.109 ; 9.1.2308 – < 9.1.2308.207 | Denial of Service through null pointer reference in “cluster/config” REST endpoint | HIGH 7.5 | 0.5 % | ||
| CVE-2024-36990 | 9.1.2312 – < 9.1.2312.202 ; 9.1.2312 – < 9.1.2312.109 ; 9.1.2308 – < 9.1.2308.209 | Denial of Service (DoS) on the datamodel/web REST endpoint | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-36992 | 9.1.2312 – < 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.207 | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-36986 | 9.1.2312 – < 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.207 | Risky command safeguards bypass through Search ID query in Analytics Workspace | MEDIUM 6.3 | 0.4 % | ||
| CVE-2024-36996 | 9.1.2312 – < 9.1.2312.109 | Information Disclosure of user names | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-36983 | 9.1.2312 – < 9.1.2312.109 ; 9.1.2308 – < 9.1.2308.207 | Command Injection using External Lookups | HIGH 8.8 | 1.0 % | ||
| CVE-2024-36994 | 9.1.2312 – < 9.1.2312.200 ; 9.1.2308 – < 9.1.2308.207 | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-36989 | 9.1.2312 – < 9.1.2312.200 | Low-privileged user could create notifications in Splunk Web Bulletin Messages | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-36987 | 9.1.2312 – < 9.1.2312.200 | Insecure File Upload in the indexing/preview REST endpoint | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-29946 | - – < 9.1.2312.104 ; - – < 9.1.2308.205 | Risky command safeguards bypass in Dashboard Examples Hub | HIGH 8.1 | 0.8 % | ||
| CVE-2023-32709 | - – < 9.0.2303.100 | Low-privileged User can View Hashed Default Splunk Password | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-32707 | - – < 9.0.2303.100 | ‘edit_user’ Capability Privilege Escalation | HIGH 8.8 | 79 % | ||
| CVE-2023-32716 | - – < 9.0.2303.100 | Denial of Service via the 'dump' SPL command | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-32717 | - – < 9.0.2303.100 | Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-32710 | - – < 9.0.2303.100 | Information Disclosure via the ‘copyresults’ SPL Command | MEDIUM 5.3 | 0.4 % | ||
| CVE-2023-32706 | 9.0.2303 and below – < 9.0.2303.100 | Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication | HIGH 7.7 | 0.6 % | ||
| CVE-2023-32708 | - – < 9.0.2303.100 | HTTP Response Splitting via the ‘rest’ SPL Command | HIGH 8.8 | 0.7 % | ||
| CVE-2023-22939 | - – < 9.0.2209.3 | SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise | HIGH 8.8 | 0.6 % | ||
| CVE-2023-22938 | - – < 9.0.2212 | Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-22937 | - – < 9.0.2209.3 | Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-22933 | - – < 9.0.2209 | Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise | HIGH 8.0 | 0.8 % | ||
| CVE-2023-22936 | - – < 9.0.2209.3 | Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise | MEDIUM 6.3 | 0.4 % | ||
| CVE-2023-22932 | - – < 9.0.2209.3 | Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise | HIGH 8.0 | 0.4 % | ||
| CVE-2023-22941 | - – < 9.0.2212 | Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon | HIGH 7.5 | 1.0 % | ||
| CVE-2023-22935 | - – < 9.0.2209.3 | SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise | HIGH 8.8 | 0.6 % | ||
| CVE-2023-22931 | - – < 8.2.2203 | ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise | MEDIUM 4.3 | 0.4 % | ||
| CVE-2023-22934 | - – < 9.0.2209.3 | SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise | HIGH 8.0 | 1.1 % | ||
| CVE-2023-22940 | - – < 9.0.2212 | SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise | MEDIUM 6.3 | 0.4 % | ||
| CVE-2022-37438 | unspecified – < 9.0.2205 | Information disclosure via the dashboard drilldown in Splunk Enterprise | LOW 3.5 | 0.5 % | ||
| CVE-2022-32152 | 8.2 – < 8.2.2203 | Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default | HIGH 8.1 | 1.0 % |