Latest vulnerabilities for "splunk splunk"

Splunk splunkSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20298

Splunk splunkSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Risk 67

Severity

8.3

First published (updated )

CVE-2026-20296

Splunk splunkPath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

Risk 66

Severity

7.2

First published (updated )

CVE-2026-20297

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Risk 65

Severity

7.1

First published (updated )

CVE-2026-20258

Splunk splunkSplunk Enterprise Missing Authentication for Critical Function Vulnerability

Risk 99

Severity

9.8

Exploited

First published (updated )

CVE-2026-20253

Splunk Splunk Cloud PlatformServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Risk 58

Severity

7.6

First published (updated )

CVE-2026-20252

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20257

Splunk Splunk Cloud PlatformImproper Access Control in Splunk Enterprise

Risk 39

Severity

5.5

First published (updated )

CVE-2026-20259

Splunk Splunk Cloud PlatformRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Risk 79

Severity

8.8

First published (updated )

CVE-2026-20251

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboards in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20255

Splunk Splunk Cloud PlatformInformation Disclosure through External Content Restriction Bypass in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20254

Splunk Splunk Cloud PlatformImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20256

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Risk 70

Severity

7.5

First published (updated )

CVE-2026-20239

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Risk 40

Severity

7.1

First published (updated )

CVE-2026-20240

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20203

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Risk 65

Severity

7.1

First published (updated )

CVE-2026-20204

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Risk 61

Severity

6.6

First published (updated )

CVE-2026-20202

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Risk 69

Severity

8

First published (updated )

CVE-2026-20163

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Risk 43

Severity

6.3

First published (updated )

CVE-2026-20162

Splunk Splunk Cloud PlatformSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2026-20166

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20164

Splunk Splunk Cloud PlatformSensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20165

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20142

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20138

Splunk Splunk Cloud PlatformClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

Risk 22

Severity

4.3

First published (updated )

CVE-2026-20139

Splunk Splunk Cloud PlatformSensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

Risk 62

Severity

6.8

First published (updated )

CVE-2026-20144

Splunk splunkImproper Access Control in Splunk Monitoring Console App

Risk 38

Severity

6.5

First published (updated )

CVE-2026-20141

Splunk Splunk Cloud PlatformRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Risk 33

Severity

5.7

First published (updated )

CVE-2026-20137

Splunk Splunk Cloud PlatformBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

Risk 16

Severity

2.7

First published (updated )

CVE-2025-20388

Splunk Splunk Secure GatewayImproper Input Validation in "label" column field in Splunk Secure Gateway App

Risk 38

Severity

6.5

First published (updated )

CVE-2025-20389

Trending

Versions

Splunk splunkSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Splunk splunkSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Splunk splunkPath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Splunk splunkSplunk Enterprise Missing Authentication for Critical Function Vulnerability

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Access Control in Splunk Enterprise

Splunk Splunk Cloud PlatformRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Splunk Splunk Cloud PlatformImproper Input Validation through Classic Dashboards in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformInformation Disclosure through External Content Restriction Bypass in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Log Files in Splunk Enterprise

Splunk Splunk Cloud PlatformDenial of Service through coldToFrozen.sh Script in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Access Control in Data Model Acceleration in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Splunk Splunk Cloud PlatformImproper Input Validation during User Account Creation in Splunk Enterprise

Splunk Splunk Cloud PlatformRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Splunk Splunk Cloud PlatformStored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformSensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Splunk Splunk Cloud PlatformSensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Splunk splunkSensitive Information Disclosure in "_internal" index in Splunk Enterprise

Splunk Splunk Cloud PlatformClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

Don't miss critical vulnerabilities

Splunk Splunk Cloud PlatformSensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

Splunk splunkImproper Access Control in Splunk Monitoring Console App

Splunk Splunk Cloud PlatformRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Splunk Splunk Cloud PlatformBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

Splunk Splunk Secure GatewayImproper Input Validation in "label" column field in Splunk Secure Gateway App

Don't miss critical vulnerabilities

Company

Resources

Contact