Skip to contentSplunk vulnerabilities
Newest
- splunk, splunk cloud platform, enterprise +1 more +3 moreImproper access control through push notifications for reports and alerts in Splunk Secure Gateway appCVE-2025-203834.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreUnauthenticated Log Injection in Splunk EnterpriseCVE-2025-20384Public exploit5.3 Medium
- splunk, splunk enterprise +1 moreIncorrect permission assignment on Splunk Enterprise for Windows during new installation or upgradeCVE-2025-203868.0 High
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk EnterpriseCVE-2025-203852.4 Low
- splunk mcp serverSPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP toolCVE-2025-203815.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreURL validation bypass through Views Dashboard in Splunk EnterpriseCVE-2025-203823.5 Low
- splunk add-on for palo alto networksSensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto NetworksCVE-2025-203732.7 Low
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk EnterpriseCVE-2025-203793.5 Low
- splunk, splunk cloud platform, enterprise +2 moreOpen Redirect on Web Login endpoint in Splunk EnterpriseCVE-2025-203783.1 Low
- splunk, splunk cloud platform, enterprise +2 moreStored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk EnterpriseCVE-2025-203685.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreUnauthenticated Blind Server Side Request Forgery (SSRF) in Splunk EnterpriseCVE-2025-203717.5 High
- splunk, splunk cloud platform, enterprise +2 moreReflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk EnterpriseCVE-2025-203675.7 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through Multiple LDAP Bind Requests in Splunk EnterpriseCVE-2025-203704.9 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control in Background Job Submission in Splunk EnterpriseCVE-2025-203666.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreExtensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk EnterpriseCVE-2025-203694.6 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-203224.3 Medium
- splunk, splunk enterprise +1 moreMissing Access Control of Saved Searches in the Splunk Archiver appCVE-2025-203234.3 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreMembership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-203216.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk EnterpriseCVE-2025-203253.1 Low
- splunk, splunk enterprise +1 moreRemote Command Execution through Scripted Input Files in Splunk EnterpriseCVE-2025-203196.8 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreImproper Access Control in System Source Types Configuration in Splunk EnterpriseCVE-2025-203245.4 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through “User Interface - Views“ configuration page in Splunk EnterpriseCVE-2025-203206.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk EnterpriseCVE-2025-203004.3 Medium
- splunk universal forwarder, splunk/universalforwarder for windows +1 moreIncorrect permission assignment on Universal Forwarder for Windows during new installation or upgradeCVE-2025-202988.0 High
- splunk, splunk cloud platform, enterprise +2 moreReflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation componentCVE-2025-20297EPSS 34.4%4.3 Medium
- splunk, splunk enterprise, secure gateway +2 moreMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway AppCVE-2025-202304.3 Medium
- splunk app for lookup file editingIncorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File EditingCVE-2025-202332.5 Low
- splunk, splunk cloud platform, enterprise +2 moreRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk EnterpriseCVE-2025-202325.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk EnterpriseCVE-2025-20229EPSS 16.0%8.0 High
- splunk, splunk cloud platform, enterprise +2 moreMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseCVE-2025-202286.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard StudioCVE-2025-202274.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk EnterpriseCVE-2025-202265.7 Medium
- splunk, splunk enterprise, secure gateway +2 moreSensitive Information Disclosure in Splunk Secure Gateway AppCVE-2025-202317.1 High
- splunk supporting add-on for active directoryRegular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)CVE-2025-03676.5 Medium
- splunk app for soarPrivilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOARCVE-2025-226216.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameterCVE-2024-532445.7 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure through SPL commandsCVE-2024-532465.3 Medium
- splunk enterprise, secure gateway +1 moreInformation Disclosure in Mobile Alert Responses in Splunk Secure GatewayCVE-2024-532434.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure due to Username Collision with a Role that has the same Name as the UserCVE-2024-532453.1 Low
- splunk enterprise, secure gateway +1 moreRemote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway appCVE-2024-532478.8 High
- splunk, splunk enterprise +1 moreSensitive information disclosure in AdminManager logging channelCVE-2024-457394.9 Medium
- splunk, splunk enterprise +1 moreSensitive information disclosure in REST_Calls logging channelCVE-2024-457384.9 Medium
- splunk, splunk cloud platform, enterprise +2 moreMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)CVE-2024-457374.3 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on WindowsCVE-2024-457338.8 High
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged user could run search as nobody in SplunkDeploymentServerConfig appCVE-2024-457327.1 High
- splunk, splunk cloud platform, enterprise +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonCVE-2024-457366.5 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-Site Scripting (XSS) via props.conf on Splunk EnterpriseCVE-2024-45741EPSS 14.8%5.4 Medium
- splunk, splunk enterprise +1 moreLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic DashboardCVE-2024-457344.3 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk EnterpriseCVE-2024-457405.4 Medium
- splunk, splunk enterprise +1 morePotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate diskCVE-2024-457318.0 High
- Show moreLoading…