Splunk Cloud Platform (Splunk) - vulnerabilities (CVEs)

111 CVEs, 0 in the last 30 days, 144 known versions, newest CVE from 2026-07-15. Vendor: Splunk.

CVEs of Splunk Cloud Platform

• CVE-2026-20298 - CVSS 6.5 (medium), 2026-07-15: In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15,…
• CVE-2026-20296 - CVSS 8.3 (high), 2026-07-15: In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16,…
• CVE-2026-20297 - CVSS 7.2 (high), 2026-07-15: In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6,…
• CVE-2026-20255 - CVSS 5.7 (medium), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and…
• CVE-2026-20258 - CVSS 7.1 (high), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and…
• CVE-2026-20257 - CVSS 5.7 (medium), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and…
• CVE-2026-20256 - CVSS 5.7 (medium), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and…
• CVE-2026-20259 - CVSS 5.5 (medium), 2026-06-10: In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23,…
• CVE-2026-20254 - CVSS 5.7 (medium), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and…
• CVE-2026-20252 - CVSS 7.6 (high), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14,…
• CVE-2026-20251 - CVSS 8.8 (high), 2026-06-10: In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and…
• CVE-2026-20240 - CVSS 7.1 (high), 2026-05-20: In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11,…
• CVE-2026-20239 - CVSS 7.5 (high), 2026-05-20: In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a…
• CVE-2026-20203 - CVSS 4.3 (medium), 2026-04-15: In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10,…
• CVE-2026-20202 - CVSS 6.6 (medium), 2026-04-15: In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10,…
• CVE-2026-20204 - CVSS 7.1 (high), 2026-04-15: In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9,…
• CVE-2026-20166 - CVSS 5.4 (medium), 2026-03-11: In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged…
• CVE-2026-20162 - CVSS 6.3 (medium), 2026-03-11: In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and…
• CVE-2026-20165 - CVSS 6.5 (medium), 2026-03-11: In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and…
• CVE-2026-20164 - CVSS 6.5 (medium), 2026-03-11: In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and…
• CVE-2026-20163 - CVSS 8 (high), 2026-03-11: In Splunk Enterprise versions below 10.2.0, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.0.2503.12, 10.1.2507.16, and…
• CVE-2026-20144 - CVSS 6.8 (medium), 2026-02-18: In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9,…
• CVE-2026-20139 - CVSS 4.3 (medium), 2026-02-18: In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9,…
• CVE-2026-20137 - CVSS 5.7 (medium), 2026-02-18: In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112,…
• CVE-2025-20389 - CVSS 6.5 (medium), 2025-12-03: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk…
• CVE-2025-20388 - CVSS 2.7 (low), 2025-12-03: In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a…
• CVE-2025-20384 - CVSS 5.3 (medium), 2025-12-03: In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125,…
• CVE-2025-20383 - CVSS 4.3 (medium), 2025-12-03: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud…
• CVE-2025-20382 - CVSS 5.4 (medium), 2025-12-03: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a…
• CVE-2025-20385 - CVSS 4.8 (medium), 2025-12-03: In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a…
• CVE-2025-20379 - CVSS 3.5 (low), 2025-11-12: In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and…
• CVE-2025-20378 - CVSS 6.1 (medium), 2025-11-12: In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an…
• CVE-2025-20369 - CVSS 6.5 (medium), 2025-10-01: In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low…
• CVE-2025-20370 - CVSS 4.9 (medium), 2025-10-01: In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a…
• CVE-2025-20371 - CVSS 8.8 (high), 2025-10-01: In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an…
• CVE-2025-20366 - CVSS 6.5 (medium), 2025-10-01: In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a…
• CVE-2025-20368 - CVSS 5.7 (medium), 2025-10-01: In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low…
• CVE-2025-20367 - CVSS 5.7 (medium), 2025-10-01: In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a…
• CVE-2025-20324 - CVSS 5.4 (medium), 2025-07-07: In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, a…
• CVE-2025-20325 - CVSS 5.3 (medium), 2025-07-07: In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.113, and 9.2.2406.119,…
• CVE-2025-20322 - CVSS 4.3 (medium), 2025-07-07: In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an…
• CVE-2025-20321 - CVSS 6.5 (medium), 2025-07-07: In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an…
• CVE-2025-20320 - CVSS 7.3 (high), 2025-07-07: In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a…
• CVE-2025-20300 - CVSS 4.3 (medium), 2025-07-07: In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a…
• CVE-2025-20297 - CVSS 5.4 (medium), 2025-06-02: In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a…
• CVE-2025-20232 - CVSS 5.7 (medium), 2025-03-26: In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2406.108, 9.2.2403.113, 9.1.2312.208…
• CVE-2025-20227 - CVSS 4.3 (medium), 2025-03-26: In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115,…
• CVE-2025-20226 - CVSS 5.7 (medium), 2025-03-26: In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a…
• CVE-2025-20229 - CVSS 8 (high), 2025-03-26: In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2.2406.108, 9.2.2403.114, and…
• CVE-2025-20228 - CVSS 6.5 (medium), 2025-03-26: In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user…
• CVE-2024-53245 - CVSS 4.3 (medium), 2024-12-10: In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold…
• CVE-2024-53244 - CVSS 5.7 (medium), 2024-12-10: In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206, a…
• CVE-2024-53246 - CVSS 7.5 (high), 2024-12-10: In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and…
• CVE-2024-45740 - CVSS 5.4 (medium), 2024-10-14: In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403, a low-privileged user that does not hold the "admin" or…
• CVE-2024-45741 - CVSS 5.4 (medium), 2024-10-14: In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does…
• CVE-2024-45735 - CVSS 4.3 (medium), 2024-10-14: In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a…
• CVE-2024-45737 - CVSS 4.3 (medium), 2024-10-14: In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user…
• CVE-2024-45736 - CVSS 6.5 (medium), 2024-10-14: In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a…
• CVE-2024-45732 - CVSS 7.1 (high), 2024-10-14: In Splunk Enterprise versions below 9.3.1, and 9.2.0 versions below 9.2.3, and Splunk Cloud Platform versions below 9.2.2403.103, 9.1.2312.200, 9.1.2312.110…
• CVE-2024-36997 - CVSS 8.1 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute…
• CVE-2024-36995 - CVSS 5.4 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user…
• CVE-2024-36994 - CVSS 5.4 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user…
• CVE-2024-36993 - CVSS 5.4 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user…
• CVE-2024-36996 - CVSS 5.3 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not…
• CVE-2024-36992 - CVSS 5.4 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user…
• CVE-2024-36990 - CVSS 6.5 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that…
• CVE-2024-36989 - CVSS 7.1 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold…
• CVE-2024-36987 - CVSS 6.5 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who…
• CVE-2024-36986 - CVSS 6.3 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user…
• CVE-2024-36983 - CVSS 8.8 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user…
• CVE-2024-36982 - CVSS 7.5 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger…
• CVE-2024-29946 - CVSS 8.1 (high), 2024-03-27: In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers…
• CVE-2023-46213 - CVSS 4.8 (medium), 2023-11-16: In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized…
• CVE-2023-40597 - CVSS 8.8 (high), 2023-08-30: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is…
• CVE-2023-40595 - CVSS 8.8 (high), 2023-08-30: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize…
• CVE-2023-40598 - CVSS 8.8 (high), 2023-08-30: In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker…
• CVE-2023-40593 - CVSS 7.5 (high), 2023-08-30: In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the…
• CVE-2023-40592 - CVSS 8.4 (high), 2023-08-30: In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting…
• CVE-2023-40594 - CVSS 7.5 (high), 2023-08-30: In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against…
• CVE-2023-32707 - CVSS 8.8 (high), 2023-06-01: In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role…
• CVE-2023-32710 - CVSS 5.3 (medium), 2023-06-01: In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an…
• CVE-2023-32706 - CVSS 7.7 (high), 2023-06-01: On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML…
• CVE-2023-32709 - CVSS 4.3 (medium), 2023-06-01: In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the…
• CVE-2023-32717 - CVSS 4.3 (medium), 2023-06-01: On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the…
• CVE-2023-32708 - CVSS 8.8 (high), 2023-06-01: In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an…
• CVE-2023-32716 - CVSS 6.5 (medium), 2023-06-01: In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability…
• CVE-2023-22933 - CVSS 8 (high), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View…
• CVE-2023-22936 - CVSS 6.3 (medium), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery…
• CVE-2023-22939 - CVSS 8.8 (high), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for…
• CVE-2023-22932 - CVSS 8.7 (high), 2023-02-14: In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image. The…
• CVE-2023-22935 - CVSS 8.8 (high), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL…
• CVE-2023-22938 - CVSS 4.3 (medium), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk…
• CVE-2023-22941 - CVSS 7.5 (high), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk…
• CVE-2023-22931 - CVSS 4.3 (medium), 2023-02-14: In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary…
• CVE-2023-22934 - CVSS 8 (high), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for…
• CVE-2023-22937 - CVSS 4.3 (medium), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename…
• CVE-2023-22940 - CVSS 6.3 (medium), 2023-02-14: In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’,…
• CVE-2022-43567 - CVSS 8.8 (high), 2022-11-04: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of…
• CVE-2022-43570 - CVSS 8.8 (high), 2022-11-04: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE)…
• CVE-2022-43566 - CVSS 8 (high), 2022-11-04: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to…