Skip to contentSplunk Enterprise vulnerabilities
- splunk, splunk enterprise +1 moreRemote Command Execution through Scripted Input Files in Splunk EnterpriseCVE-2025-203196.8 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreImproper Access Control in System Source Types Configuration in Splunk EnterpriseCVE-2025-203245.4 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through “User Interface - Views“ configuration page in Splunk EnterpriseCVE-2025-203206.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk EnterpriseCVE-2025-203004.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreReflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation componentCVE-2025-20297EPSS 34.4%4.3 Medium
- splunk, splunk enterprise, secure gateway +2 moreMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway AppCVE-2025-202304.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk EnterpriseCVE-2025-202325.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk EnterpriseCVE-2025-20229EPSS 16.0%8.0 High
- splunk, splunk cloud platform, enterprise +2 moreMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-202286.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard StudioCVE-2025-202274.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk EnterpriseCVE-2025-202265.7 Medium
- splunk, splunk enterprise, secure gateway +2 moreSensitive Information Disclosure in Splunk Secure Gateway AppCVE-2025-202317.1 High
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameterCVE-2024-532445.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through SPL commandsCVE-2024-532465.3 Medium
- splunk enterprise, secure gateway +1 moreInformation Disclosure in Mobile Alert Responses in Splunk Secure GatewayCVE-2024-532434.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure due to Username Collision with a Role that has the same Name as the UserCVE-2024-532453.1 Low
- splunk enterprise, secure gateway +1 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway appCVE-2024-532478.8 High
- splunk, splunk enterprise +1 moreSensitive information disclosure in AdminManager logging channelCVE-2024-457394.9 Medium
- splunk, splunk enterprise +1 moreSensitive information disclosure in REST_Calls logging channelCVE-2024-457384.9 Medium
- splunk, splunk cloud platform, enterprise +2 moreMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)CVE-2024-457374.3 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on WindowsCVE-2024-457338.8 High
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged user could run search as nobody in SplunkDeploymentServerConfig appCVE-2024-457327.1 High
- splunk, splunk cloud platform, enterprise +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonCVE-2024-457366.5 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-Site Scripting (XSS) via props.conf on Splunk EnterpriseCVE-2024-45741EPSS 14.8%5.4 Medium
- splunk, splunk enterprise +1 moreLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic DashboardCVE-2024-457344.3 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk EnterpriseCVE-2024-457405.4 Medium
- splunk, splunk enterprise +1 morePotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate diskCVE-2024-457318.0 High
- splunk, splunk enterprise, secure gateway +1 more +3 moreImproper Access Control for low-privileged user in Splunk Secure Gateway AppCVE-2024-457354.3 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in conf-web/settings REST endpointCVE-2024-369974.6 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Web BulletinCVE-2024-369935.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged user could create experimental itemsCVE-2024-369954.3 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreDenial of Service through null pointer reference in “cluster/config” REST endpointCVE-2024-369827.5 High
- splunk, splunk enterprise +1 morePath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on WindowsCVE-2024-36991Public exploitEPSS 13.0%7.5 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service (DoS) on the datamodel/web REST endpointCVE-2024-369906.5 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk EnterpriseCVE-2024-36985Public exploit8.8 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard ElementsCVE-2024-369925.4 Medium
- splunk, splunk enterprise, enterprise security +2 moreRemote Code Execution through Serialized Session Payload in Splunk Enterprise on WindowsCVE-2024-369848.8 High
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreRisky command safeguards bypass through Search ID query in Analytics WorkspaceCVE-2024-369866.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure of user namesCVE-2024-369965.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreCommand Injection using External LookupsCVE-2024-369838.0 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard ElementsCVE-2024-369945.4 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreLow-privileged user could create notifications in Splunk Web Bulletin MessagesCVE-2024-369896.5 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreInsecure File Upload in the indexing/preview REST endpointCVE-2024-369874.3 Medium
- splunk, splunk enterprise +1 moreSplunk Authentication Token Exposure in Debug Log in Splunk EnterpriseCVE-2024-299457.2 High
- splunk, splunk enterprise, cloud +1 more +3 moreRisky command safeguards bypass in Dashboard Examples HubCVE-2024-299468.1 High
- splunk, splunk enterprise +1 moreDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk PartitionCVE-2024-236787.5 High
- splunk, splunk cloud, enterprise +2 moreSensitive Information Disclosure of Index Metrics through “mrollup” SPL CommandCVE-2024-236764.6 Medium
- splunk, splunk enterprise, cloud +2 moreServer Response Disclosure in RapidDiag Salesforce.com Log FileCVE-2024-236774.3 Medium
- splunk, splunk enterprise, cloud +2 moreSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection DeletionCVE-2024-236756.5 Medium
- splunk enterprise security, enterprise security (es) +1 moreDenial of Service of an Investigation in Splunk Enterprise Security through Investigation attachmentsCVE-2024-221644.3 Medium
- Show moreLoading…