Latest vulnerabilities for "splunk splunk enterprise"

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Risk 70

Severity

7.5

First published (updated )

CVE-2026-20239

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Risk 40

Severity

7.1

First published (updated )

CVE-2026-20240

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20203

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Risk 65

Severity

7.1

First published (updated )

CVE-2026-20204

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Risk 61

Severity

6.6

First published (updated )

CVE-2026-20202

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Risk 69

Severity

8

First published (updated )

CVE-2026-20163

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Risk 43

Severity

6.3

First published (updated )

CVE-2026-20162

Splunk Splunk Cloud PlatformSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2026-20166

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20164

Splunk Splunk Cloud PlatformSensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20165

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20142

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20138

Splunk Splunk Cloud PlatformClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20139

Splunk Splunk Cloud PlatformSensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20144

Splunk splunkImproper Access Control in Splunk Monitoring Console App

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20141

Splunk Splunk Cloud PlatformRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20137

Splunk Splunk Cloud PlatformBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

Risk 16

Severity

2.7

First published (updated )

CVE-2025-20388

Splunk Splunk Secure GatewayImproper Input Validation in "label" column field in Splunk Secure Gateway App

Risk 38

Severity

6.5

First published (updated )

CVE-2025-20389

Splunk Splunk Cloud PlatformRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

Risk 71

Severity

8

First published (updated )

CVE-2025-20229

Splunk Splunk EnterpriseSensitive Information Disclosure in Splunk Secure Gateway App

Risk 65

Severity

7.1

First published (updated )

CVE-2025-20231

Trending

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Splunk Splunk Cloud PlatformClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

Splunk splunkImproper Access Control in Splunk Monitoring Console App

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Splunk Splunk Cloud PlatformBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

Splunk Splunk Secure GatewayImproper Input Validation in "label" column field in Splunk Secure Gateway App

Splunk Splunk Cloud PlatformRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

Splunk Splunk EnterpriseSensitive Information Disclosure in Splunk Secure Gateway App

Don't miss critical vulnerabilities

Company

Resources

Contact