Splunk Splunk Enterprise
250 published vulnerabilities name this product. The 200 most recent are listed.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76302 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Security Hardening in Splunk Enterprise - October 2026 | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-76301 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Security Hardening in Splunk Enterprise - October 2026 | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76300 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Security Hardening in Splunk Enterprise - October 2026 | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76299 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Security Hardening in Splunk Enterprise - October 2026 | CRITICAL 9.9 | 0.3 % | ||
| CVE-2026-76298 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 | Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76297 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise | MEDIUM 4.2 | 0.1 % | ||
| CVE-2026-76296 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76295 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | SPL Injection through the REST API in Splunk Secure Gateway | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76294 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Improper Access Control in Field Extraction Management in Splunk Enterprise | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76293 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise | HIGH 7.2 | 0.5 % | ||
| CVE-2026-76292 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Missing Authorization through REST API Endpoints in Splunk Secure Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76291 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76290 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 | Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76289 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Denial of Service (DoS) through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76288 | 10.4 – < 10.4.4 ; 10.2 – < 10.2.8 ; 10.0 – < 10.0.11 ; … | Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76287 | 10.4 – < 10.4.4 | Authorization Bypass in the Data Management REST API in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76285 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Adherence to Coding Standards in Splunk Enterprise | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76284 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Neutralization in Splunk Enterprise | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-76283 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Protection Mechanism Failure in Splunk Enterprise | HIGH 7.6 | 0.3 % | ||
| CVE-2026-76282 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Control of a Resource Through its Lifetime in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76281 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Access Control in Splunk Enterprise | 0.2 % | |||
| CVE-2026-76280 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-76279 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Input Validation of Index Names through the collect Command in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76278 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 | Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76277 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise | MEDIUM 4.1 | 0.2 % | ||
| CVE-2026-76276 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 | Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76275 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76274 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 | Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76273 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Input Validation through the collect Command in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76272 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Missing Access Control through the REST API in Splunk Secure Gateway | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76271 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 | Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76270 | 10.4 – < 10.4.3 | Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76269 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76268 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 | Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise | CRITICAL 9.8 | 4.8 % | ||
| CVE-2026-76267 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 | Log Injection through the REST API in Splunk App for Splunk O11y Cloud | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76266 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise | HIGH 7.7 | 0.2 % | ||
| CVE-2026-76265 | 10.4 – < 10.4.3 ; 10.2 – < 10.2.7 ; 10.0 – < 10.0.10 ; … | Improper Access Control through REST API Endpoints in Splunk Secure Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76264 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.10 ; … | Improper Authorization through the REST API in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-76355 | 10.4 – < 10.4.2 | Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76354 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Path Traversal through Search Head Clustering in Splunk Enterprise | HIGH 8.1 | 0.4 % | ||
| CVE-2026-76353 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Path Traversal through Knowledge Bundle Replication in Splunk Enterprise | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-76352 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Authorization through the REST API in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76351 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76350 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76349 | 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; 9.4 – < 9.4.14 | SPL Injection through Splunk Web Form Tokens in Splunk Enterprise | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-76348 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise | LOW 3.8 | 0.3 % | ||
| CVE-2026-76347 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-76346 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76345 | 10.4 – < 10.4.2 | Remote Code Execution (RCE) through the REST API in Splunk Enterprise | MEDIUM 6.0 | 0.5 % | ||
| CVE-2026-76344 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Path Traversal through the Search Dispatch REST API in Splunk Enterprise | HIGH 7.7 | 0.4 % | ||
| CVE-2026-76343 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-76342 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76341 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76340 | 10.4 – < 10.4.2 | Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-76339 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through the geostats Command in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-76338 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise | HIGH 8.1 | 0.5 % | ||
| CVE-2026-76337 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Path Traversal through Splunk Web Static File Serving in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-76336 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 | Improper Access Control through the REST API in Splunk Enterprise | HIGH 7.1 | 0.3 % | ||
| CVE-2026-76335 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76334 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise | MEDIUM 6.4 | 0.2 % | ||
| CVE-2026-76333 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise | HIGH 7.1 | 0.3 % | ||
| CVE-2026-76332 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Splunk Web in Splunk Enterprise | HIGH 7.1 | 0.3 % | ||
| CVE-2026-76331 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through the REST API in Splunk Enterprise | HIGH 8.1 | 0.4 % | ||
| CVE-2026-76330 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise | HIGH 7.1 | 0.3 % | ||
| CVE-2026-76329 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-76328 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Splunk Web in Splunk Enterprise | MEDIUM 6.7 | 0.3 % | ||
| CVE-2026-76327 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Splunk Web in Splunk Secure Gateway | MEDIUM 6.4 | 0.3 % | ||
| CVE-2026-76326 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-76325 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise | HIGH 7.3 | 0.4 % | ||
| CVE-2026-76324 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-76323 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise | HIGH 7.3 | 0.3 % | ||
| CVE-2026-76322 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise | HIGH 8.0 | 0.3 % | ||
| CVE-2026-76321 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Nearby Event Searches in Splunk Enterprise | HIGH 7.3 | 0.4 % | ||
| CVE-2026-76320 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76319 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Remote Code Execution (RCE) through Federated Search in Splunk Enterprise | HIGH 8.8 | 0.6 % | ||
| CVE-2026-76318 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-76317 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Path Traversal through the Lookup Configuration REST API in Splunk Enterprise | HIGH 8.8 | 0.6 % | ||
| CVE-2026-76316 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.5 ; 10.0 – < 10.0.9 ; … | Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise | HIGH 8.8 | 0.5 % | ||
| CVE-2026-76315 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Code Injection through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.7 % | ||
| CVE-2026-76314 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.8 % | ||
| CVE-2026-76313 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Remote Code Execution (RCE) through the REST API in Splunk Enterprise | HIGH 8.8 | 0.6 % | ||
| CVE-2026-76312 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Access Control through Embedded Reports in Splunk Enterprise | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-76311 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-76310 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-76309 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76263 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 | Improper Access Control through the REST API in Splunk Enterprise | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-76262 | 10.4 – < 10.4.2 | Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-76261 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Insecure Default Access Control List through the REST API in Splunk Secure Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76260 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76259 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Improper Privilege Management on the Management Port in Splunk Enterprise for Windows | HIGH 8.8 | 0.2 % | ||
| CVE-2026-76258 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76257 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Missing Authorization through REST API Endpoints in Splunk Secure Gateway | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76256 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Information Exposure through REST API Endpoints in Splunk Secure Gateway | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-76255 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.8 ; … | Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise | HIGH 7.3 | 0.3 % | ||
| CVE-2026-76254 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76253 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise | HIGH 8.8 | 0.4 % | ||
| CVE-2026-76252 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 ; … | Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-76251 | 10.4 – < 10.4.2 ; 10.2 – < 10.2.6 ; 10.0 – < 10.0.9 | Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud | HIGH 7.1 | 0.3 % | ||
| CVE-2026-20298 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.5 ; 10.0 – < 10.0.8 ; … | Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-20296 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.5 ; 10.0 – < 10.0.8 ; … | SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise | HIGH 8.3 | 0.2 % | ||
| CVE-2026-20297 | 10.4 – < 10.4.1 ; 10.2 – < 10.2.5 ; 10.0 – < 10.0.8 ; … | Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise | HIGH 7.2 | 0.6 % | ||
| CVE-2026-20258 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise | HIGH 7.1 | 0.2 % | ||
| CVE-2026-20253 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise | CRITICAL 9.8 | 97 % | KEV | |
| CVE-2026-20252 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise | HIGH 7.6 | 0.3 % | ||
| CVE-2026-20257 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-20259 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 | Improper Access Control in Splunk Enterprise | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-20255 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Improper Input Validation through Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20251 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway | HIGH 8.8 | 32 % | ||
| CVE-2026-20254 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Information Disclosure through External Content Restriction Bypass in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20256 | 10.2 – < 10.2.4 ; 10.0 – < 10.0.7 ; 9.4 – < 9.4.12 ; … | Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2026-20239 | 10.2 – < 10.2.2 ; 10.0 – < 10.0.5 | Sensitive Information Disclosure through Log Files in Splunk Enterprise | HIGH 7.5 | 0.5 % | ||
| CVE-2026-20240 | 10.2 – < 10.2.2 ; 10.0 – < 10.0.5 ; 9.4 – < 9.4.11 ; … | Denial of Service through coldToFrozen.sh Script in Splunk Enterprise | HIGH 7.1 | 0.4 % | ||
| CVE-2026-20203 | 10.2 – < 10.2.2 ; 10.0 – < 10.0.5 ; 9.4 – < 9.4.10 ; … | Improper Access Control in Data Model Acceleration in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-20204 | 10.2 – < 10.2.1 ; 10.0 – < 10.0.5 ; 9.4 – < 9.4.10 ; … | Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise | HIGH 7.1 | 3.1 % | ||
| CVE-2026-20202 | 10.2 – < 10.2.2 ; 10.0 – < 10.0.5 ; 9.4 – < 9.4.10 ; … | Improper Input Validation during User Account Creation in Splunk Enterprise | MEDIUM 6.6 | 0.2 % | ||
| CVE-2026-20163 | 10.0 – < 10.0.4 ; 9.4 – < 9.4.9 ; 9.3 – < 9.3.10 | Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise | HIGH 8.0 | 0.5 % | ||
| CVE-2026-20162 | 10.0 – < 10.0.3 ; 9.4 – < 9.4.9 ; 9.3 – < 9.3.9 | Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-20166 | 10.2 – < 10.2.1 ; 10.0 – < 10.0.4 | Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20164 | 10.0 – < 10.0.3 ; 9.4 – < 9.4.9 ; 9.3 – < 9.3.10 | Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20165 | 10.2 – < 10.2.1 ; 10.0 – < 10.0.4 ; 9.4 – < 9.4.9 ; … | Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20142 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.7 ; 9.3 – < 9.3.9 ; … | Sensitive Information Disclosure in "_internal" index in Splunk Enterprise | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20138 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.7 ; 9.3 – < 9.3.9 ; … | Sensitive Information Disclosure in "_internal" index in Splunk Enterprise | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20139 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.8 ; 9.3 – < 9.3.9 ; … | Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise | MEDIUM 4.3 | 5.7 % | ||
| CVE-2026-20144 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.7 ; 9.3 – < 9.3.8 ; … | Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-20141 | 10.0 – < 10.0.3 ; 9.4 – < 9.4.8 ; 9.3 – < 9.3.9 | Improper Access Control in Splunk Monitoring Console App | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20137 | 10.2 – < 10.2.0 ; 10.0 – < 10.0.3 ; 9.4 – < 9.4.5 ; … | Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise | MEDIUM 5.7 | 0.3 % | ||
| CVE-2025-20388 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise | LOW 2.7 | 0.4 % | ||
| CVE-2025-20389 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Improper Input Validation in "label" column field in Splunk Secure Gateway App | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20387 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade | HIGH 8.0 | 0.5 % | ||
| CVE-2025-20383 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20384 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Unauthenticated Log Injection in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20386 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade | HIGH 8.0 | 0.5 % | ||
| CVE-2025-20385 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-20382 | 10.0 – < 10.0.2 ; 9.4 – < 9.4.6 ; 9.3 – < 9.3.8 ; … | URL validation bypass through Views Dashboard in Splunk Enterprise | MEDIUM 5.4 | 0.2 % | ||
| CVE-2025-20379 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.5 ; 9.3 – < 9.3.7 ; … | Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise | LOW 3.5 | 0.3 % | ||
| CVE-2025-20378 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.5 ; 9.3 – < 9.3.7 ; … | Open Redirect on Web Login endpoint in Splunk Enterprise | MEDIUM 6.1 | 0.3 % | ||
| CVE-2025-20368 | 10.0 – < 10.0.0 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2025-20371 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise | HIGH 8.8 | 0.5 % | ||
| CVE-2025-20367 | 10.0 – < 10.0.0 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise | MEDIUM 5.7 | 0.4 % | ||
| CVE-2025-20370 | 10.0 – < 10.0.1 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-20366 | 10.0 – < 10.0.0 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Improper Access Control in Background Job Submission in Splunk Enterprise | MEDIUM 6.5 | 0.4 % | ||
| CVE-2025-20369 | 10.0 – < 10.0.0 ; 9.4 – < 9.4.4 ; 9.3 – < 9.3.6 ; … | Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-20322 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-20323 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Missing Access Control of Saved Searches in the Splunk Archiver app | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20321 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20325 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-20319 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Remote Command Execution through Scripted Input Files in Splunk Enterprise | MEDIUM 6.8 | 0.5 % | ||
| CVE-2025-20324 | 9.4 – < 9.4.2 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Improper Access Control in System Source Types Configuration in Splunk Enterprise | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-20320 | 9.4 – < 9.4.3 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.7 ; … | Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise | HIGH 7.3 | 0.5 % | ||
| CVE-2025-20300 | 9.4 – < 9.4.2 ; 9.3 – < 9.3.5 ; 9.2 – < 9.2.6 ; … | Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise | MEDIUM 4.3 | 0.3 % | ||
| CVE-2025-20297 | 9.4 – < 9.4.2 ; 9.3 – < 9.3.4 ; 9.2 – < 9.2.6 ; … | Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component | MEDIUM 5.4 | 29 % | ||
| CVE-2025-20230 | 9.4 – < 9.4.1 ; 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; … | Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-20232 | 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; 9.1 – < 9.1.8 | Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.5 % | ||
| CVE-2025-20229 | 9.4 – < 9.4.0 ; 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; … | Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise | HIGH 8.0 | 16 % | ||
| CVE-2025-20228 | 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; 9.1 – < 9.1.8 | Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20227 | 9.4 – < 9.4.1 ; 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; … | Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio | MEDIUM 4.3 | 0.4 % | ||
| CVE-2025-20226 | 9.4 – < 9.4.1 ; 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; … | Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.5 % | ||
| CVE-2025-20231 | 9.4 – < 9.4.1 ; 9.3 – < 9.3.3 ; 9.2 – < 9.2.5 ; … | Sensitive Information Disclosure in Splunk Secure Gateway App | HIGH 7.1 | 0.5 % | ||
| CVE-2024-53244 | 9.3 – < 9.3.2 ; 9.2 – < 9.2.4 ; 9.1 – < 9.1.7 | Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter | MEDIUM 5.7 | 0.5 % | ||
| CVE-2024-53246 | 9.3 – < 9.3.2 ; 9.2 – < 9.2.4 ; 9.1 – < 9.1.7 | Sensitive Information Disclosure through SPL commands | HIGH 7.5 | 0.3 % | ||
| CVE-2024-53243 | 9.3 – < 9.3.2 ; 9.2 – < 9.2.4 ; 9.1 – < 9.1.7 | Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-53245 | 9.2 – < 9.2.4 ; 9.1 – < 9.1.7 | Information Disclosure due to Username Collision with a Role that has the same Name as the User | MEDIUM 4.3 | 0.4 % | ||
| CVE-2024-53247 | 9.3 – < 9.3.2 ; 9.2 – < 9.2.4 ; 9.1 – < 9.1.7 | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app | HIGH 8.8 | 1.1 % | ||
| CVE-2024-45739 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Sensitive information disclosure in AdminManager logging channel | MEDIUM 4.9 | 0.5 % | ||
| CVE-2024-45738 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Sensitive information disclosure in REST_Calls logging channel | MEDIUM 4.9 | 0.5 % | ||
| CVE-2024-45737 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-45733 | 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows | HIGH 8.8 | 1.1 % | ||
| CVE-2024-45732 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 | Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app | HIGH 7.1 | 0.4 % | ||
| CVE-2024-45736 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-45741 | 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise | MEDIUM 5.4 | 15 % | ||
| CVE-2024-45734 | 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-45740 | 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-45731 | 9.3 – < 9.3.1 ; 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows… | HIGH 8.0 | 0.6 % | ||
| CVE-2024-45735 | 9.2 – < 9.2.3 ; 9.1 – < 9.1.6 | Improper Access Control for low-privileged user in Splunk Secure Gateway App | MEDIUM 4.3 | 0.3 % | ||
| CVE-2024-36997 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint | HIGH 8.1 | 0.5 % | ||
| CVE-2024-36993 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Persistent Cross-site Scripting (XSS) in Web Bulletin | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-36995 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Low-privileged user could create experimental items | MEDIUM 4.3 | 0.2 % | ||
| CVE-2024-36982 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Denial of Service through null pointer reference in “cluster/config” REST endpoint | HIGH 7.5 | 0.5 % | ||
| CVE-2024-36991 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows | HIGH 7.5 | 13 % | ||
| CVE-2024-36990 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Denial of Service (DoS) on the datamodel/web REST endpoint | MEDIUM 6.5 | 0.7 % | ||
| CVE-2024-36985 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Ente… | HIGH 8.8 | 6.5 % | ||
| CVE-2024-36992 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-36984 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows | HIGH 8.8 | 1.4 % | ||
| CVE-2024-36986 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Risky command safeguards bypass through Search ID query in Analytics Workspace | MEDIUM 6.3 | 0.4 % | ||
| CVE-2024-36996 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Information Disclosure of user names | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-36983 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Command Injection using External Lookups | HIGH 8.8 | 1.0 % | ||
| CVE-2024-36994 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-36989 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Low-privileged user could create notifications in Splunk Web Bulletin Messages | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-36987 | 9.2 – < 9.2.2 ; 9.1 – < 9.1.5 ; 9.0 – < 9.0.10 | Insecure File Upload in the indexing/preview REST endpoint | MEDIUM 6.5 | 0.3 % | ||
| CVE-2024-29945 | 9.2 – < 9.2.1 ; 9.1 – < 9.1.4 ; 9.0 – < 9.0.9 | Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise | HIGH 7.2 | 0.9 % | ||
| CVE-2024-29946 | 9.2 – < 9.2.1 ; 9.1 – < 9.1.4 ; 9.0 – < 9.0.9 | Risky command safeguards bypass in Dashboard Examples Hub | HIGH 8.1 | 0.8 % | ||
| CVE-2024-23678 | 9.0 – < 9.0.8 ; 9.1 – < 9.1.3 | Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition | HIGH 8.8 | 0.2 % | ||
| CVE-2024-23676 | 9.0 – < 9.0.8 ; 9.1 – < 9.1.3 | Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command | MEDIUM 4.6 | 0.3 % | ||
| CVE-2024-23677 | 9.0 – < 9.0.8 | Server Response Disclosure in RapidDiag Salesforce.com Log File | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-23675 | 9.0 – < 9.0.8 ; 9.1 – < 9.1.3 | Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-46213 | 9.0 – < 9.0.7 ; 9.1 – < 9.1.2 | Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page | MEDIUM 4.8 | 0.5 % | ||
| CVE-2023-46214 | 9.0 – < 9.0.7 ; 9.1 – < 9.1.2 | Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing | HIGH 8.8 | 89 % | ||
| CVE-2023-40597 | 8.2 – < 8.2.12 ; 9.0 – < 9.0.6 ; 9.1 – < 9.1.1 | Absolute Path Traversal in Splunk Enterprise Using runshellscript.py | HIGH 8.8 | 0.2 % | ||
| CVE-2023-40596 | 8.2 – < 8.2.12 ; 9.0 – < 9.0.6 ; 9.1 – < 9.1.1 | Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL | HIGH 8.8 | 0.2 % | ||
| CVE-2023-40593 | 8.2 – < 8.2.12 ; 9.0 – < 9.0.6 | Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request | HIGH 7.5 | 0.6 % |