Skip to contentSplunk Enterprise vulnerabilities
- splunk, splunk enterprise +1 moreCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseCVE-2026-762526.8 Medium
- splunk, splunk enterprise +1 moreMissing Authorization through REST API Endpoints in the Splunk App for Splunk Observability CloudCVE-2026-762517.1 High
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk EnterpriseCVE-2026-202985.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk EnterpriseCVE-2026-202968.3 High
- splunk, splunk cloud platform, enterprise +2 morePath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk EnterpriseCVE-2026-202977.2 High
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk EnterpriseCVE-2026-202587.1 High
- splunk enterprise, splunk +1 moreUnauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk EnterpriseCVE-2026-20253In KEVPublic exploitEPSS 96.9%9.8 Critical
- splunk, splunk cloud platform, enterprise +2 moreServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk EnterpriseCVE-2026-202527.6 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Classic Dashboard CSS in Splunk EnterpriseCVE-2026-202575.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Splunk EnterpriseCVE-2026-202595.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Classic Dashboards in Splunk EnterpriseCVE-2026-202555.7 Medium
- splunk, splunk cloud platform, enterprise +1 more +3 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure GatewayCVE-2026-20251Public exploitEPSS 30.6%8.8 High
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure through External Content Restriction Bypass in Splunk EnterpriseCVE-2026-202545.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk EnterpriseCVE-2026-202565.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through Log Files in Splunk EnterpriseCVE-2026-202397.5 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service through coldToFrozen.sh Script in Splunk EnterpriseCVE-2026-202407.1 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Data Model Acceleration in Splunk EnterpriseCVE-2026-202034.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Handling and Insufficient Isolation of Specific Temporary Files in Splunk EnterpriseCVE-2026-202047.1 High
- splunk, splunk cloud platform, enterprise +2 moreImproper Input Validation during User Account Creation in Splunk EnterpriseCVE-2026-202026.6 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk EnterpriseCVE-2026-201638.0 High
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through Path Traversal in Splunk EnterpriseCVE-2026-201626.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk EnterpriseCVE-2026-201665.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through Improper Access Control in Splunk EnterpriseCVE-2026-201646.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in MongoClient logging channel in Splunk EnterpriseCVE-2026-201656.3 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk EnterpriseCVE-2026-201426.8 Medium
- splunk, splunk enterprise +1 moreSensitive Information Disclosure in "_internal" index in Splunk EnterpriseCVE-2026-201386.8 Medium
- splunk, splunk cloud platform, enterprise +2 moreClient-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk EnterpriseCVE-2026-201394.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in ''_internal'' index in Splunk EnterpriseCVE-2026-201446.8 Medium
- splunk, splunk enterprise +1 moreImproper Access Control in Splunk Monitoring Console AppCVE-2026-201414.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk EnterpriseCVE-2026-201373.5 Low
- splunk, splunk cloud platform, enterprise +2 moreBlind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk EnterpriseCVE-2025-203882.7 Low
- splunk, splunk cloud platform, enterprise +1 more +3 moreImproper Input Validation in "label" column field in Splunk Secure Gateway AppCVE-2025-203894.3 Medium
- splunk, splunk enterprise +1 moreIncorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgradeCVE-2025-203878.0 High
- splunk, splunk cloud platform, enterprise +1 more +3 moreImproper access control through push notifications for reports and alerts in Splunk Secure Gateway appCVE-2025-203834.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreUnauthenticated Log Injection in Splunk EnterpriseCVE-2025-20384Public exploit5.3 Medium
- splunk, splunk enterprise +1 moreIncorrect permission assignment on Splunk Enterprise for Windows during new installation or upgradeCVE-2025-203868.0 High
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk EnterpriseCVE-2025-203852.4 Low
- splunk, splunk cloud platform, enterprise +2 moreURL validation bypass through Views Dashboard in Splunk EnterpriseCVE-2025-203823.5 Low
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk EnterpriseCVE-2025-203793.5 Low
- splunk, splunk cloud platform, enterprise +2 moreOpen Redirect on Web Login endpoint in Splunk EnterpriseCVE-2025-203783.1 Low
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk EnterpriseCVE-2025-203685.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreUnauthenticated Blind Server Side Request Forgery (SSRF) in Splunk EnterpriseCVE-2025-203717.5 High
- splunk, splunk cloud platform, enterprise +2 moreReflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk EnterpriseCVE-2025-203675.7 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through Multiple LDAP Bind Requests in Splunk EnterpriseCVE-2025-203704.9 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Background Job Submission in Splunk EnterpriseCVE-2025-203666.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreExtensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk EnterpriseCVE-2025-203694.6 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-203224.3 Medium
- splunk, splunk enterprise +1 moreMissing Access Control of Saved Searches in the Splunk Archiver appCVE-2025-203234.3 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreMembership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-203216.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk EnterpriseCVE-2025-203253.1 Low
- Show moreLoading…