Latest vulnerabilities for "splunk cloud platform"

Splunk splunkUnauthenticated Log Injection in Splunk Enterprise

Risk 27

Severity

5.3

First published (updated )

CVE-2025-20384

Splunk splunkStored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

Risk 29

Severity

4.8

First published (updated )

CVE-2025-20385

Splunk splunkURL validation bypass through Views Dashboard in Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2025-20382

Splunk EnterpriseUnauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

Risk 77

Severity

8.8

First published (updated )

CVE-2025-20371

Splunk Splunk Cloud PlatformReflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

Risk 34

Severity

5.4

First published (updated )

CVE-2025-20297

Splunk Splunk Cloud PlatformRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2025-20232

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Risk 37

Severity

6.5

First published (updated )

CVE-2025-20228

Splunk Cloud PlatformInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Risk 22

Severity

4.3

First published (updated )

CVE-2025-20227

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2025-20226

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Risk 33

Severity

5.7

First published (updated )

CVE-2024-53244

Splunk Splunk Cloud PlatformSensitive Information Disclosure through SPL commands

Risk 43

Severity

7.5

First published (updated )

CVE-2024-53246

Splunk Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User

Risk 22

Severity

4.3

First published (updated )

CVE-2024-53245

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45737

Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Risk 48

Severity

7.1

First published (updated )

CVE-2024-45732

Splunk splunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Risk 38

Severity

6.5

First published (updated )

CVE-2024-45736

Splunk splunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2024-45741

Splunk splunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2024-45740

Splunk splunkImproper Access Control for low-privileged user in Splunk Secure Gateway App

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45735

Splunk splunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

Risk 54

Severity

8.1

First published (updated )

CVE-2024-36997

Splunk splunkPersistent Cross-site Scripting (XSS) in Web Bulletin

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36993

Splunk splunkLow-privileged user could create experimental items

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36995

Splunk splunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

Risk 43

Severity

7.5

First published (updated )

CVE-2024-36982

Splunk splunkDenial of Service (DoS) on the datamodel/web REST endpoint

Risk 38

Severity

6.5

First published (updated )

CVE-2024-36990

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36992

Splunk splunkRisky command safeguards bypass through Search ID query in Analytics Workspace

Risk 43

Severity

6.3

First published (updated )

CVE-2024-36986

Splunk splunkCommand Injection using External Lookups

Risk 79

Severity

8.8

First published (updated )

CVE-2024-36983

Splunk splunkInformation Disclosure of user names

Risk 27

Severity

5.3

First published (updated )

CVE-2024-36996

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36994

Splunk splunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

Risk 48

Severity

7.1

First published (updated )

CVE-2024-36989

Splunk splunkInsecure File Upload in the indexing/preview REST endpoint

Risk 38

Severity

6.5

First published (updated )

CVE-2024-36987

Trending

Versions

Splunk splunkUnauthenticated Log Injection in Splunk Enterprise

Splunk splunkStored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

Splunk splunkURL validation bypass through Views Dashboard in Splunk Enterprise

Splunk EnterpriseUnauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

Splunk Splunk Cloud PlatformReflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Splunk Cloud PlatformInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformSensitive Information Disclosure through SPL commands

Splunk Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Splunk splunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Don't miss critical vulnerabilities

Splunk splunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Splunk splunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Splunk splunkImproper Access Control for low-privileged user in Splunk Secure Gateway App

Splunk splunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

Splunk splunkPersistent Cross-site Scripting (XSS) in Web Bulletin

Don't miss critical vulnerabilities

Splunk splunkLow-privileged user could create experimental items

Splunk splunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

Splunk splunkDenial of Service (DoS) on the datamodel/web REST endpoint

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Splunk splunkRisky command safeguards bypass through Search ID query in Analytics Workspace

Don't miss critical vulnerabilities

Splunk splunkCommand Injection using External Lookups

Splunk splunkInformation Disclosure of user names

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Splunk splunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

Splunk splunkInsecure File Upload in the indexing/preview REST endpoint

Don't miss critical vulnerabilities

Company

Resources

Contact