Vendor
Splunk vulnerabilities
240 advisories tracked, 1 exploited in the wild according to CISA, 127 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2026-20253Splunk Enterprise and Cloud Platform
Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseCVE-2026-20251Splunk Enterprise and Cloud Platform
Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure GatewayCVE-2025-20297Splunk Enterprise and Cloud Platform
Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation componentCVE-2025-20229Splunk Enterprise and Cloud Platform
Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk EnterpriseCVE-2024-45741Splunk Enterprise and Cloud Platform
Persistent Cross-Site Scripting (XSS) via props.conf on Splunk EnterpriseCVE-2024-36991Splunk Enterprise and Cloud Platform
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
Show all 9Show fewer
CVE-2023-46214Splunk Enterprise and Cloud Platform
Remote code execution (RCE) in Splunk Enterprise through Insecure XML ParsingCVE-2023-32707Splunk Enterprise and Cloud Platform
‘edit_user’ Capability Privilege EscalationCVE-2023-32714Apps and add-ons
Path Traversal in Splunk App for Lookup File Editing
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-76281 | Splunk Enterprise and Cloud Platform | Improper Access Control in Splunk Enterprise | MEDIUM 5.3 | 0.21% | – | |
| CVE-2026-76282 | Splunk Enterprise and Cloud Platform | Improper Control of a Resource Through its Lifetime in Splunk Enterprise | HIGH 8.8 | 0.30% | – | |
| CVE-2026-76283 | Splunk Enterprise and Cloud Platform | Protection Mechanism Failure in Splunk Enterprise | HIGH 7.6 | 0.20% | – | |
| CVE-2026-76284 | Splunk Enterprise and Cloud Platform | Improper Neutralization in Splunk Enterprise | CRITICAL 9.8 | 0.33% | – | |
| CVE-2026-76285 | Splunk Enterprise and Cloud Platform | Improper Adherence to Coding Standards in Splunk Enterprise | – | 0.14% | – | |
| CVE-2026-76251 | Splunk Enterprise and Cloud Platform | Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud | HIGH 7.1 | 0.29% | – | |
| CVE-2026-76252 | Splunk Enterprise and Cloud Platform | Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise | MEDIUM 6.8 | 0.26% | – | |
| CVE-2026-76253 | Splunk Enterprise and Cloud Platform | Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise | HIGH 8.8 | 0.42% | – | |
| CVE-2026-76254 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise | HIGH 7.5 | 0.42% | – | |
| CVE-2026-76255 | Splunk Enterprise and Cloud Platform | Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise | MEDIUM 6.4 | 0.29% | – | |
| CVE-2026-76256 | Splunk Enterprise and Cloud Platform | Information Exposure through REST API Endpoints in Splunk Secure Gateway | MEDIUM 4.3 | 0.30% | – | |
| CVE-2026-76257 | Splunk Enterprise and Cloud Platform | Missing Authorization through REST API Endpoints in Splunk Secure Gateway | MEDIUM 6.5 | 0.34% | – | |
| CVE-2026-76258 | Splunk Enterprise and Cloud Platform | Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway | MEDIUM 6.5 | 0.34% | – | |
| CVE-2026-76259 | Splunk Enterprise and Cloud Platform | Improper Privilege Management on the Management Port in Splunk Enterprise for Windows | HIGH 8.8 | 0.17% | – | |
| CVE-2026-76260 | Splunk Enterprise and Cloud Platform | Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.34% | – | |
| CVE-2026-76261 | Splunk Enterprise and Cloud Platform | Insecure Default Access Control List through the REST API in Splunk Secure Gateway | MEDIUM 5.3 | 0.29% | – | |
| CVE-2026-76262 | Splunk Enterprise and Cloud Platform | Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise | HIGH 7.5 | 0.50% | – | |
| CVE-2026-76263 | Splunk Enterprise and Cloud Platform | Improper Access Control through the REST API in Splunk Enterprise | MEDIUM 5.4 | 0.29% | – | |
| CVE-2026-76309 | Splunk Enterprise and Cloud Platform | Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise | MEDIUM 4.3 | 0.30% | – | |
| CVE-2026-76310 | Splunk Enterprise and Cloud Platform | Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise | CRITICAL 9.4 | 0.45% | – | |
| CVE-2026-76311 | Splunk Enterprise and Cloud Platform | Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise | CRITICAL 9.4 | 0.45% | – | |
| CVE-2026-76312 | Splunk Enterprise and Cloud Platform | Improper Access Control through Embedded Reports in Splunk Enterprise | CRITICAL 9.4 | 0.45% | – | |
| CVE-2026-76313 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through the REST API in Splunk Enterprise | HIGH 8.8 | 0.64% | – | |
| CVE-2026-76314 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.81% | – | |
| CVE-2026-76315 | Splunk Enterprise and Cloud Platform | Code Injection through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.65% | – | |
| CVE-2026-76316 | Splunk Enterprise and Cloud Platform | Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise | HIGH 8.8 | 0.51% | – | |
| CVE-2026-76317 | Splunk Enterprise and Cloud Platform | Path Traversal through the Lookup Configuration REST API in Splunk Enterprise | HIGH 8.8 | 0.56% | – | |
| CVE-2026-76318 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise | MEDIUM 5.7 | 0.25% | – | |
| CVE-2026-76319 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through Federated Search in Splunk Enterprise | HIGH 8.8 | 0.64% | – | |
| CVE-2026-76320 | Splunk Enterprise and Cloud Platform | SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise | MEDIUM 5.9 | 0.29% | – | |
| CVE-2026-76321 | Splunk Enterprise and Cloud Platform | SPL Injection through Nearby Event Searches in Splunk Enterprise | HIGH 7.3 | 0.44% | – | |
| CVE-2026-76322 | Splunk Enterprise and Cloud Platform | SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise | MEDIUM 6.7 | 0.32% | – | |
| CVE-2026-76323 | Splunk Enterprise and Cloud Platform | SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise | MEDIUM 6.4 | 0.33% | – | |
| CVE-2026-76324 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise | MEDIUM 5.7 | 0.30% | – | |
| CVE-2026-76325 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise | HIGH 7.3 | 0.36% | – | |
| CVE-2026-76326 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise | MEDIUM 5.7 | 0.34% | – | |
| CVE-2026-76327 | Splunk Enterprise and Cloud Platform | SPL Injection through Splunk Web in Splunk Secure Gateway | MEDIUM 6.4 | 0.26% | – | |
| CVE-2026-76328 | Splunk Enterprise and Cloud Platform | SPL Injection through Splunk Web in Splunk Enterprise | MEDIUM 6.7 | 0.28% | – | |
| CVE-2026-76329 | Splunk Enterprise and Cloud Platform | SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise | MEDIUM 6.4 | 0.26% | – | |
| CVE-2026-76330 | Splunk Enterprise and Cloud Platform | SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise | HIGH 7.1 | 0.33% | – | |
| CVE-2026-76331 | Splunk Enterprise and Cloud Platform | SPL Injection through the REST API in Splunk Enterprise | HIGH 8.1 | 0.40% | – | |
| CVE-2026-76332 | Splunk Enterprise and Cloud Platform | SPL Injection through Splunk Web in Splunk Enterprise | HIGH 7.1 | 0.33% | – | |
| CVE-2026-76333 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise | HIGH 7.1 | 0.33% | – | |
| CVE-2026-76334 | Splunk Enterprise and Cloud Platform | SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise | MEDIUM 6.4 | 0.15% | – | |
| CVE-2026-76335 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise | HIGH 8.8 | 0.53% | – | |
| CVE-2026-76336 | Splunk Enterprise and Cloud Platform | Improper Access Control through the REST API in Splunk Enterprise | HIGH 7.1 | 0.34% | – | |
| CVE-2026-76337 | Splunk Enterprise and Cloud Platform | Path Traversal through Splunk Web Static File Serving in Splunk Enterprise | MEDIUM 5.3 | 0.40% | – | |
| CVE-2026-76338 | Splunk Enterprise and Cloud Platform | Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise | HIGH 8.1 | 0.47% | – | |
| CVE-2026-76339 | Splunk Enterprise and Cloud Platform | SPL Injection through the geostats Command in Splunk Enterprise | MEDIUM 5.4 | 0.23% | – | |
| CVE-2026-76340 | Splunk Enterprise and Cloud Platform | Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise | MEDIUM 5.3 | 0.37% | – | |
| CVE-2026-76341 | Splunk Enterprise and Cloud Platform | Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise | MEDIUM 5.4 | 0.23% | – | |
| CVE-2026-76342 | Splunk Enterprise and Cloud Platform | Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise | MEDIUM 5.4 | 0.23% | – | |
| CVE-2026-76343 | Splunk Enterprise and Cloud Platform | Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise | MEDIUM 6.5 | 0.38% | – | |
| CVE-2026-76344 | Splunk Enterprise and Cloud Platform | Path Traversal through the Search Dispatch REST API in Splunk Enterprise | HIGH 7.7 | 0.41% | – | |
| CVE-2026-76345 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through the REST API in Splunk Enterprise | MEDIUM 6 | 0.52% | – | |
| CVE-2026-76346 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise | MEDIUM 5.4 | 0.23% | – | |
| CVE-2026-76347 | Splunk Enterprise and Cloud Platform | Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway | MEDIUM 5.4 | 0.29% | – | |
| CVE-2026-76348 | Splunk Enterprise and Cloud Platform | Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise | LOW 3.8 | 0.32% | – | |
| CVE-2026-76349 | Splunk Enterprise and Cloud Platform | SPL Injection through Splunk Web Form Tokens in Splunk Enterprise | MEDIUM 6.4 | 0.26% | – | |
| CVE-2026-76350 | Splunk Enterprise and Cloud Platform | Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise | HIGH 8.8 | 0.52% | – | |
| CVE-2026-76351 | Splunk Enterprise and Cloud Platform | Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway | HIGH 8.8 | 0.42% | – | |
| CVE-2026-76352 | Splunk Enterprise and Cloud Platform | Improper Authorization through the REST API in Splunk Enterprise | HIGH 8.8 | 0.42% | – | |
| CVE-2026-76353 | Splunk Enterprise and Cloud Platform | Path Traversal through Knowledge Bundle Replication in Splunk Enterprise | MEDIUM 5.4 | 0.37% | – | |
| CVE-2026-76354 | Splunk Enterprise and Cloud Platform | Path Traversal through Search Head Clustering in Splunk Enterprise | HIGH 8.1 | 0.44% | – | |
| CVE-2026-76355 | Splunk Enterprise and Cloud Platform | Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise | HIGH 7.5 | 0.50% | – | |
| CVE-2026-76356 | Enterprise Security and SOAR | Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR | HIGH 8.1 | 0.61% | – | |
| CVE-2026-76357 | Enterprise Security and SOAR | Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR | HIGH 7.6 | 0.43% | – | |
| CVE-2026-76358 | Enterprise Security and SOAR | Path Traversal through App Installation Tar Extraction in Splunk SOAR | MEDIUM 6.5 | 0.52% | – | |
| CVE-2026-76359 | Enterprise Security and SOAR | Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR | MEDIUM 6.5 | 0.52% | – | |
| CVE-2026-76360 | Enterprise Security and SOAR | Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR | MEDIUM 4.3 | 0.27% | – | |
| CVE-2026-76361 | Enterprise Security and SOAR | Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR | LOW 2.7 | 0.30% | – | |
| CVE-2026-76362 | Enterprise Security and SOAR | Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR | HIGH 7.4 | 0.21% | – | |
| CVE-2026-76363 | Enterprise Security and SOAR | Structured Query Language Injection through the REST API in Splunk SOAR | MEDIUM 6.5 | 0.41% | – | |
| CVE-2026-76364 | Enterprise Security and SOAR | Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR | MEDIUM 6.5 | 0.40% | – | |
| CVE-2026-76365 | Enterprise Security and SOAR | Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR | MEDIUM 6.5 | 0.40% | – | |
| CVE-2026-76366 | Enterprise Security and SOAR | Information Disclosure through the REST API in Splunk SOAR | MEDIUM 6.5 | 0.39% | – | |
| CVE-2026-76367 | Enterprise Security and SOAR | Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR | MEDIUM 4 | 0.20% | – | |
| CVE-2026-76368 | Enterprise Security and SOAR | Missing Authorization through Playbooks in Splunk SOAR | LOW 2.7 | 0.30% | – | |
| CVE-2026-76369 | Enterprise Security and SOAR | Path Traversal through Automation Broker in Splunk SOAR | LOW 2.7 | 0.35% | – | |
| CVE-2026-76370 | Enterprise Security and SOAR | Information Disclosure through the REST API in Splunk SOAR | MEDIUM 4.3 | 0.27% | – | |
| CVE-2026-76387 | Enterprise Security and SOAR | SPL Injection through the REST API in Splunk Enterprise Security | HIGH 8.1 | 0.40% | – | |
| CVE-2026-76388 | Enterprise Security and SOAR | Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security | HIGH 8.1 | 0.35% | – | |
| CVE-2026-76391 | Apps and add-ons | Improper Privilege Management through Agent Run History in Splunk AI Toolkit | HIGH 8.3 | 0.47% | – | |
| CVE-2026-76392 | Apps and add-ons | Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit | MEDIUM 5.4 | 0.23% | – | |
| CVE-2026-76393 | Apps and add-ons | Race Condition during Model Upload through the REST API in Splunk AI Toolkit | MEDIUM 5.9 | 0.18% | – | |
| CVE-2026-76394 | Apps and add-ons | Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit | HIGH 8.3 | 0.35% | – | |
| CVE-2026-76395 | Apps and add-ons | Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit | HIGH 8.8 | 0.65% | – | |
| CVE-2026-76396 | Apps and add-ons | Improper Access Control through Scheduled Searches in Splunk AI Toolkit | HIGH 7.5 | 0.32% | – | |
| CVE-2026-76397 | Apps and add-ons | Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit | HIGH 8.1 | 0.35% | – | |
| CVE-2026-76398 | Apps and add-ons | Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit | MEDIUM 4.3 | 0.25% | – | |
| CVE-2026-76399 | Apps and add-ons | Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit | HIGH 8.1 | 0.35% | – | |
| CVE-2026-76400 | Apps and add-ons | Denial of Service (DoS) through the REST API in Splunk Connect for Kafka | MEDIUM 5.9 | 0.38% | – | |
| CVE-2026-76401 | Apps and add-ons | Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka | MEDIUM 5.9 | 0.38% | – | |
| CVE-2026-76402 | Apps and add-ons | Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka | HIGH 8.2 | 0.41% | – | |
| CVE-2026-76403 | Apps and add-ons | Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka | HIGH 7.4 | 0.24% | – | |
| CVE-2026-76404 | Apps and add-ons | Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app | CRITICAL 9.1 | 0.75% | – | |
| CVE-2026-20296 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise | HIGH 8.3 | 0.18% | – | |
| CVE-2026-20297 | Splunk Enterprise and Cloud Platform | Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise | HIGH 7.2 | 0.57% | – | |
| CVE-2026-20298 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise | MEDIUM 5.3 | 0.32% | – | |
| CVE-2026-20265 | Apps and add-ons | Insecure Default Domain Allowlist in Splunk AI Toolkit | MEDIUM 4.3 | 0.22% | – | |
| CVE-2026-20266 | Apps and add-ons | OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit | CRITICAL 9.1 | 0.63% | – | |
| CVE-2026-20253Full analysis | Splunk Enterprise and Cloud Platform | Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise | CRITICAL 9.8 | 97% | Yes | |
| CVE-2026-20251 | Splunk Enterprise and Cloud Platform | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway | HIGH 8.8 | 32% | – | |
| CVE-2026-20252 | Splunk Enterprise and Cloud Platform | Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise | HIGH 7.6 | 0.35% | – | |
| CVE-2026-20254 | Splunk Enterprise and Cloud Platform | Information Disclosure through External Content Restriction Bypass in Splunk Enterprise | MEDIUM 5.7 | 0.41% | – | |
| CVE-2026-20255 | Splunk Enterprise and Cloud Platform | Improper Input Validation through Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.35% | – | |
| CVE-2026-20256 | Splunk Enterprise and Cloud Platform | Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise | MEDIUM 5.7 | 0.36% | – | |
| CVE-2026-20257 | Splunk Enterprise and Cloud Platform | Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise | MEDIUM 5.7 | 0.29% | – | |
| CVE-2026-20258 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise | HIGH 7.1 | 0.24% | – | |
| CVE-2026-20259 | Splunk Enterprise and Cloud Platform | Improper Access Control in Splunk Enterprise | MEDIUM 5.5 | 0.19% | – | |
| CVE-2026-20238 | Apps and add-ons | Improper Access Control through Role Inheritance in Splunk AI Toolkit app | MEDIUM 6.5 | 0.32% | – | |
| CVE-2026-20239 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure through Log Files in Splunk Enterprise | HIGH 7.5 | 0.48% | – | |
| CVE-2026-20240 | Splunk Enterprise and Cloud Platform | Denial of Service through coldToFrozen.sh Script in Splunk Enterprise | HIGH 7.1 | 0.40% | – | |
| CVE-2026-20202 | Splunk Enterprise and Cloud Platform | Improper Input Validation during User Account Creation in Splunk Enterprise | MEDIUM 6.6 | 0.25% | – | |
| CVE-2026-20203 | Splunk Enterprise and Cloud Platform | Improper Access Control in Data Model Acceleration in Splunk Enterprise | MEDIUM 4.3 | 0.15% | – | |
| CVE-2026-20204 | Splunk Enterprise and Cloud Platform | Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise | HIGH 7.1 | 3.1% | – | |
| CVE-2026-20162 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise | MEDIUM 6.3 | 0.21% | – | |
| CVE-2026-20163 | Splunk Enterprise and Cloud Platform | Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise | HIGH 8 | 0.48% | – | |
| CVE-2026-20164 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise | MEDIUM 6.5 | 0.24% | – | |
| CVE-2026-20165 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise | MEDIUM 6.3 | 0.17% | – | |
| CVE-2026-20166 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise | MEDIUM 5.4 | 0.16% | – | |
| CVE-2026-20137 | Splunk Enterprise and Cloud Platform | Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise | LOW 3.5 | 0.24% | – | |
| CVE-2026-20138 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in "_internal" index in Splunk Enterprise | MEDIUM 6.8 | 0.31% | – | |
| CVE-2026-20139 | Splunk Enterprise and Cloud Platform | Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise | MEDIUM 4.3 | 5.2% | – | |
| CVE-2026-20141 | Splunk Enterprise and Cloud Platform | Improper Access Control in Splunk Monitoring Console App | MEDIUM 4.3 | 0.20% | – | |
| CVE-2026-20142 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in "_internal" index in Splunk Enterprise | MEDIUM 6.8 | 0.31% | – | |
| CVE-2026-20144 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise | MEDIUM 6.8 | 0.36% | – | |
| CVE-2025-20382 | Splunk Enterprise and Cloud Platform | URL validation bypass through Views Dashboard in Splunk Enterprise | LOW 3.5 | 0.23% | – | |
| CVE-2025-20383 | Splunk Enterprise and Cloud Platform | Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app | MEDIUM 4.3 | 0.30% | – | |
| CVE-2025-20384 | Splunk Enterprise and Cloud Platform | Unauthenticated Log Injection in Splunk Enterprise | MEDIUM 5.3 | 0.39% | – | |
| CVE-2025-20385 | Splunk Enterprise and Cloud Platform | Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise | LOW 2.4 | 0.28% | – | |
| CVE-2025-20386 | Splunk Enterprise and Cloud Platform | Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade | HIGH 8 | 0.49% | – | |
| CVE-2025-20387 | Splunk Enterprise and Cloud Platform | Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade | HIGH 8 | 0.49% | – | |
| CVE-2025-20388 | Splunk Enterprise and Cloud Platform | Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise | LOW 2.7 | 0.35% | – | |
| CVE-2025-20389 | Splunk Enterprise and Cloud Platform | Improper Input Validation in "label" column field in Splunk Secure Gateway App | MEDIUM 4.3 | 0.41% | – | |
| CVE-2025-20378 | Splunk Enterprise and Cloud Platform | Open Redirect on Web Login endpoint in Splunk Enterprise | LOW 3.1 | 0.25% | – | |
| CVE-2025-20379 | Splunk Enterprise and Cloud Platform | Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise | LOW 3.5 | 0.30% | – | |
| CVE-2025-20366 | Splunk Enterprise and Cloud Platform | Improper Access Control in Background Job Submission in Splunk Enterprise | MEDIUM 6.5 | 0.44% | – | |
| CVE-2025-20367 | Splunk Enterprise and Cloud Platform | Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise | MEDIUM 5.7 | 0.36% | – | |
| CVE-2025-20368 | Splunk Enterprise and Cloud Platform | Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise | MEDIUM 5.7 | 0.36% | – | |
| CVE-2025-20369 | Splunk Enterprise and Cloud Platform | Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise | MEDIUM 4.6 | 0.30% | – | |
| CVE-2025-20370 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise | MEDIUM 4.9 | 0.56% | – | |
| CVE-2025-20371 | Splunk Enterprise and Cloud Platform | Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise | HIGH 7.5 | 0.47% | – | |
| CVE-2025-20300 | Splunk Enterprise and Cloud Platform | Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise | MEDIUM 4.3 | 0.30% | – | |
| CVE-2025-20319 | Splunk Enterprise and Cloud Platform | Remote Command Execution through Scripted Input Files in Splunk Enterprise | MEDIUM 6.8 | 0.53% | – | |
| CVE-2025-20320 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise | MEDIUM 6.3 | 0.46% | – | |
| CVE-2025-20321 | Splunk Enterprise and Cloud Platform | Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.20% | – | |
| CVE-2025-20322 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 4.3 | 0.22% | – | |
| CVE-2025-20323 | Splunk Enterprise and Cloud Platform | Missing Access Control of Saved Searches in the Splunk Archiver app | MEDIUM 4.3 | 0.30% | – | |
| CVE-2025-20324 | Splunk Enterprise and Cloud Platform | Improper Access Control in System Source Types Configuration in Splunk Enterprise | MEDIUM 5.4 | 0.28% | – | |
| CVE-2025-20325 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise | LOW 3.1 | 0.39% | – | |
| CVE-2025-20297 | Splunk Enterprise and Cloud Platform | Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component | MEDIUM 4.3 | 29% | – | |
| CVE-2025-20298 | Universal Forwarder | Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade | HIGH 8 | 0.29% | – | |
| CVE-2025-20226 | Splunk Enterprise and Cloud Platform | Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.47% | – | |
| CVE-2025-20227 | Splunk Enterprise and Cloud Platform | Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio | MEDIUM 4.3 | 0.42% | – | |
| CVE-2025-20228 | Splunk Enterprise and Cloud Platform | Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.23% | – | |
| CVE-2025-20229 | Splunk Enterprise and Cloud Platform | Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise | HIGH 8 | 16% | – | |
| CVE-2025-20231 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure in Splunk Secure Gateway App | HIGH 7.1 | 0.52% | – | |
| CVE-2025-20232 | Splunk Enterprise and Cloud Platform | Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise | MEDIUM 5.7 | 0.47% | – | |
| CVE-2025-20233 | Apps and add-ons | Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing | LOW 2.5 | 0.12% | – | |
| CVE-2025-20230 | Splunk Enterprise and Cloud Platform | Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App | MEDIUM 4.3 | 0.32% | – | |
| CVE-2025-22621 | Enterprise Security and SOAR | Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR | MEDIUM 6.4 | 0.26% | – | |
| CVE-2025-0367 | Apps and add-ons | Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch) | MEDIUM 6.5 | 0.51% | – | |
| CVE-2024-53243 | Splunk Enterprise and Cloud Platform | Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway | MEDIUM 4.3 | 0.29% | – | |
| CVE-2024-53244 | Splunk Enterprise and Cloud Platform | Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter | MEDIUM 5.7 | 0.47% | – | |
| CVE-2024-53245 | Splunk Enterprise and Cloud Platform | Information Disclosure due to Username Collision with a Role that has the same Name as the User | LOW 3.1 | 0.36% | – | |
| CVE-2024-53246 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure through SPL commands | MEDIUM 5.3 | 0.29% | – | |
| CVE-2024-53247 | Splunk Enterprise and Cloud Platform | Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app | HIGH 8.8 | 1.1% | – | |
| CVE-2024-45731 | Splunk Enterprise and Cloud Platform | Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk | HIGH 8 | 0.57% | – | |
| CVE-2024-45732 | Splunk Enterprise and Cloud Platform | Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app | HIGH 7.1 | 0.39% | – | |
| CVE-2024-45733 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows | HIGH 8.8 | 1.1% | – | |
| CVE-2024-45734 | Splunk Enterprise and Cloud Platform | Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard | MEDIUM 4.3 | 0.34% | – | |
| CVE-2024-45735 | Splunk Enterprise and Cloud Platform | Improper Access Control for low-privileged user in Splunk Secure Gateway App | MEDIUM 4.3 | 0.34% | – | |
| CVE-2024-45736 | Splunk Enterprise and Cloud Platform | Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon | MEDIUM 6.5 | 0.54% | – | |
| CVE-2024-45737 | Splunk Enterprise and Cloud Platform | Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) | MEDIUM 4.3 | 0.23% | – | |
| CVE-2024-45738 | Splunk Enterprise and Cloud Platform | Sensitive information disclosure in REST_Calls logging channel | MEDIUM 4.9 | 0.48% | – | |
| CVE-2024-45739 | Splunk Enterprise and Cloud Platform | Sensitive information disclosure in AdminManager logging channel | MEDIUM 4.9 | 0.51% | – | |
| CVE-2024-45740 | Splunk Enterprise and Cloud Platform | Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise | MEDIUM 5.4 | 0.37% | – | |
| CVE-2024-45741 | Splunk Enterprise and Cloud Platform | Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise | MEDIUM 5.4 | 15% | – | |
| CVE-2024-36982 | Splunk Enterprise and Cloud Platform | Denial of Service through null pointer reference in “cluster/config” REST endpoint | HIGH 7.5 | 0.50% | – | |
| CVE-2024-36983 | Splunk Enterprise and Cloud Platform | Command Injection using External Lookups | HIGH 8 | 1.00% | – | |
| CVE-2024-36984 | Splunk Enterprise and Cloud Platform | Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows | HIGH 8.8 | 1.4% | – | |
| CVE-2024-36985 | Splunk Enterprise and Cloud Platform | Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise | HIGH 8.8 | 6.5% | – | |
| CVE-2024-36986 | Splunk Enterprise and Cloud Platform | Risky command safeguards bypass through Search ID query in Analytics Workspace | MEDIUM 6.3 | 0.39% | – | |
| CVE-2024-36987 | Splunk Enterprise and Cloud Platform | Insecure File Upload in the indexing/preview REST endpoint | MEDIUM 4.3 | 0.29% | – | |
| CVE-2024-36989 | Splunk Enterprise and Cloud Platform | Low-privileged user could create notifications in Splunk Web Bulletin Messages | MEDIUM 6.5 | 0.28% | – | |
| CVE-2024-36990 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) on the datamodel/web REST endpoint | MEDIUM 6.5 | 0.69% | – | |
| CVE-2024-36991 | Splunk Enterprise and Cloud Platform | Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows | HIGH 7.5 | 13% | – | |
| CVE-2024-36992 | Splunk Enterprise and Cloud Platform | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.31% | – | |
| CVE-2024-36993 | Splunk Enterprise and Cloud Platform | Persistent Cross-site Scripting (XSS) in Web Bulletin | MEDIUM 5.4 | 0.37% | – | |
| CVE-2024-36994 | Splunk Enterprise and Cloud Platform | Persistent Cross-site Scripting (XSS) in Dashboard Elements | MEDIUM 5.4 | 0.30% | – | |
| CVE-2024-36995 | Splunk Enterprise and Cloud Platform | Low-privileged user could create experimental items | MEDIUM 4.3 | 0.21% | – | |
| CVE-2024-36996 | Splunk Enterprise and Cloud Platform | Information Disclosure of user names | MEDIUM 5.3 | 0.35% | – | |
| CVE-2024-36997 | Splunk Enterprise and Cloud Platform | Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint | MEDIUM 4.6 | 0.55% | – | |
| CVE-2024-29945 | Splunk Enterprise and Cloud Platform | Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise | HIGH 7.2 | 0.95% | – | |
| CVE-2024-29946 | Splunk Enterprise and Cloud Platform | Risky command safeguards bypass in Dashboard Examples Hub | HIGH 8.1 | 0.77% | – | |
| CVE-2023-46230 | Apps and add-ons | Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder | HIGH 8.2 | 0.39% | – | |
| CVE-2023-46231 | Apps and add-ons | Session Token Disclosure to Internal Log Files in Splunk Add-on Builder | HIGH 8.8 | 0.48% | – | |
| CVE-2024-23675 | Splunk Enterprise and Cloud Platform | Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion | MEDIUM 6.5 | 0.38% | – | |
| CVE-2024-23676 | Splunk Enterprise and Cloud Platform | Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command | MEDIUM 4.6 | 0.32% | – | |
| CVE-2024-23677 | Splunk Enterprise and Cloud Platform | Server Response Disclosure in RapidDiag Salesforce.com Log File | MEDIUM 4.3 | 0.40% | – | |
| CVE-2024-23678 | Splunk Enterprise and Cloud Platform | Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition | HIGH 7.5 | 0.22% | – | |
| CVE-2024-22164 | Enterprise Security and SOAR | Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments | MEDIUM 4.3 | 0.46% | – | |
| CVE-2024-22165 | Enterprise Security and SOAR | Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation | MEDIUM 6.5 | 0.52% | – | |
| CVE-2023-46213 | Splunk Enterprise and Cloud Platform | Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page | MEDIUM 4.8 | 0.47% | – | |
| CVE-2023-46214 | Splunk Enterprise and Cloud Platform | Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing | HIGH 8 | 89% | – | |
| CVE-2023-40592 | Splunk Enterprise and Cloud Platform | Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint | HIGH 8.4 | 0.57% | – | |
| CVE-2023-40593 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request | MEDIUM 6.3 | 0.58% | – | |
| CVE-2023-40594 | Splunk Enterprise and Cloud Platform | Denial of Service (DoS) via the ‘printf’ Search Function | MEDIUM 6.5 | 0.40% | – | |
| CVE-2023-40595 | Splunk Enterprise and Cloud Platform | Remote Code Execution via Serialized Session Payload | HIGH 8.8 | 0.90% | – | |
| CVE-2023-40596 | Splunk Enterprise and Cloud Platform | Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL | HIGH 7 | 0.17% | – | |
| CVE-2023-40597 | Splunk Enterprise and Cloud Platform | Absolute Path Traversal in Splunk Enterprise Using runshellscript.py | HIGH 7.8 | 0.23% | – | |
| CVE-2023-40598 | Splunk Enterprise and Cloud Platform | Command Injection in Splunk Enterprise Using External Lookups | HIGH 8.5 | 0.85% | – | |
| CVE-2023-4571 | Enterprise Security and SOAR | Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI) | HIGH 8.6 | 0.25% | – | |
| CVE-2023-3997 | Enterprise Security and SOAR | Unauthenticated Log Injection In Splunk SOAR | HIGH 8.6 | 0.29% | – | |
| CVE-2023-32706 | Splunk Enterprise and Cloud Platform | Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication | HIGH 7.7 | 0.60% | – | |
| CVE-2023-32707 | Splunk Enterprise and Cloud Platform | ‘edit_user’ Capability Privilege Escalation | HIGH 8.8 | 79% | – | |
| CVE-2023-32708 | Splunk Enterprise and Cloud Platform | HTTP Response Splitting via the ‘rest’ SPL Command | HIGH 7.2 | 0.75% | – | |
| CVE-2023-32709 | Splunk Enterprise and Cloud Platform | Low-privileged User can View Hashed Default Splunk Password | MEDIUM 4.3 | 0.39% | – | |
| CVE-2023-32710 | Splunk Enterprise and Cloud Platform | Information Disclosure via the ‘copyresults’ SPL Command | MEDIUM 4.8 | 0.44% | – | |
| CVE-2023-32711 | Splunk Enterprise and Cloud Platform | Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View | MEDIUM 5.4 | 0.35% | – | |
| CVE-2023-32712 | Splunk Enterprise and Cloud Platform | Unauthenticated Log Injection in Splunk Enterprise | HIGH 8.6 | 0.34% | – | |
| CVE-2023-32713 | Apps and add-ons | Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream | HIGH 7.8 | 0.33% | – | |
| CVE-2023-32714 | Apps and add-ons | Path Traversal in Splunk App for Lookup File Editing | HIGH 8.1 | 43% | – | |
| CVE-2023-32715 | Apps and add-ons | Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing | MEDIUM 4.7 | 0.31% | – | |
| CVE-2023-32716 | Splunk Enterprise and Cloud Platform | Denial of Service via the 'dump' SPL command | MEDIUM 6.5 | 0.62% | – | |
| CVE-2023-32717 | Splunk Enterprise and Cloud Platform | Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results | MEDIUM 4.3 | 0.36% | – | |
| CVE-2023-22931 | Splunk Enterprise and Cloud Platform | ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise | MEDIUM 4.3 | 0.36% | – | |
| CVE-2023-22932 | Splunk Enterprise and Cloud Platform | Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise | HIGH 8 | 0.40% | – | |
| CVE-2023-22933 | Splunk Enterprise and Cloud Platform | Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise | HIGH 8 | 0.83% | – | |
| CVE-2023-22934 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise | HIGH 7.3 | 1.1% | – | |
| CVE-2023-22935 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise | HIGH 8.1 | 0.61% | – | |
| CVE-2023-22936 | Splunk Enterprise and Cloud Platform | Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise | MEDIUM 6.3 | 0.38% | – | |
| CVE-2023-22937 | Splunk Enterprise and Cloud Platform | Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise | MEDIUM 4.3 | 0.41% | – | |
| CVE-2023-22938 | Splunk Enterprise and Cloud Platform | Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise | MEDIUM 4.3 | 0.36% | – | |
| CVE-2023-22939 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise | HIGH 8.1 | 0.59% | – | |
| CVE-2023-22940 | Splunk Enterprise and Cloud Platform | SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise | MEDIUM 6.3 | 0.43% | – | |
| CVE-2023-22941 | Splunk Enterprise and Cloud Platform | Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon | MEDIUM 6.5 | 1.0% | – | |
| CVE-2023-22942 | Splunk Enterprise and Cloud Platform | Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise | MEDIUM 5.4 | 0.21% | – | |
| CVE-2023-22943 | Apps and add-ons | Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK | MEDIUM 4.8 | 0.32% | – |
Sources: Splunk security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.