Splunk
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 294 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 23, 2010 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise
SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
CISA Adds Splunk Enterprise RCE (CVE-2026-20253) to KEV - CVSS 9.8. How are your SOCs handling the PostgreSQL sidecar mitigation?
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
Insecure Default Domain Allowlist in Splunk AI Toolkit
Splunk Enterprise had an unauthenticated RCE sitting in your security stack
Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs
Monitor Splunk in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.