Enterprise Security (Splunk) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-08-19. Vendor: Splunk.

CVEs of Enterprise Security

• CVE-2026-76388 - CVSS 8.1 (high), 2026-08-19: In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior…
• CVE-2026-76387 - CVSS 8.1 (high), 2026-08-19: In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability…
• CVE-2024-36984 - CVSS 8.8 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then…
• CVE-2024-22165 - CVSS 6.5 (medium), 2024-01-09: In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The…
• CVE-2024-22164 - CVSS 4.3 (medium), 2024-01-09: In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the…