Splunk Splunk Cloud Platform

• CVE-2026-20298 Medium 5.3 Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise 0.3%
• CVE-2026-20296 High 8.3 SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise 0.2%
• CVE-2026-20297 High 7.2 Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise 0.6%
• CVE-2026-20258 High 7.1 Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise 0.2%
• CVE-2026-20252 High 7.6 Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise 0.3%
• CVE-2026-20257 Medium 5.7 Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise 0.3%
• CVE-2026-20259 Medium 5.5 Improper Access Control in Splunk Enterprise 0.2%
• CVE-2026-20255 Medium 5.7 Improper Input Validation through Classic Dashboards in Splunk Enterprise 0.4%
• CVE-2026-20251 High 8.8 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway 30.6%
• CVE-2026-20254 Medium 5.7 Information Disclosure through External Content Restriction Bypass in Splunk Enterprise 0.4%
• CVE-2026-20256 Medium 5.7 Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise 0.4%
• CVE-2026-20239 High 7.5 Sensitive Information Disclosure through Log Files in Splunk Enterprise 0.5%
• CVE-2026-20240 High 7.1 Denial of Service through coldToFrozen.sh Script in Splunk Enterprise 0.4%
• CVE-2026-20203 Medium 4.3 Improper Access Control in Data Model Acceleration in Splunk Enterprise 0.2%
• CVE-2026-20204 High 7.1 Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise 3.1%
• CVE-2026-20202 Medium 6.6 Improper Input Validation during User Account Creation in Splunk Enterprise 0.2%
• CVE-2026-20163 High 8.0 Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise 0.5%
• CVE-2026-20162 Medium 6.3 Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise 0.2%
• CVE-2026-20166 Medium 5.4 Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise 0.2%
• CVE-2026-20164 Medium 6.5 Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise 0.3%
• CVE-2026-20165 Medium 6.3 Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise 0.2%
• CVE-2026-20139 Medium 4.3 Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise 5.7%
• CVE-2026-20144 Medium 6.8 Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise 0.3%
• CVE-2026-20137 Low 3.5 Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise 0.3%
• CVE-2025-20388 Low 2.7 Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise 0.4%
• CVE-2025-20389 Medium 4.3 Improper Input Validation in "label" column field in Splunk Secure Gateway App 0.4%
• CVE-2025-20383 Medium 4.3 Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app 0.3%
• CVE-2025-20384 Medium 5.3 Unauthenticated Log Injection in Splunk Enterprise 0.4%
• CVE-2025-20385 Low 2.4 Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise 0.3%
• CVE-2025-20382 Low 3.5 URL validation bypass through Views Dashboard in Splunk Enterprise 0.2%
• CVE-2025-20379 Low 3.5 Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise 0.3%
• CVE-2025-20378 Low 3.1 Open Redirect on Web Login endpoint in Splunk Enterprise 0.3%
• CVE-2025-20368 Medium 5.7 Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise 0.4%
• CVE-2025-20371 High 7.5 Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise 0.5%
• CVE-2025-20367 Medium 5.7 Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise 0.4%
• CVE-2025-20366 Medium 6.5 Improper Access Control in Background Job Submission in Splunk Enterprise 0.4%
• CVE-2025-20369 Medium 4.6 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise 0.3%
• CVE-2025-20325 Low 3.1 Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise 0.4%
• CVE-2025-20300 Medium 4.3 Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise 0.3%
• CVE-2025-20297 Medium 4.3 Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component 31.2%
• CVE-2025-20232 Medium 5.7 Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise 0.5%
• CVE-2025-20229 High 8.0 Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise 16.0%
• CVE-2025-20228 Medium 6.5 Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise 0.2%
• CVE-2025-20227 Medium 4.3 Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio 0.4%
• CVE-2025-20226 Medium 5.7 Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise 0.5%
• CVE-2024-53244 Medium 5.7 Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter 0.5%
• CVE-2024-53246 Medium 5.3 Sensitive Information Disclosure through SPL commands 0.3%
• CVE-2024-53245 Low 3.1 Information Disclosure due to Username Collision with a Role that has the same Name as the User 0.4%
• CVE-2024-45737 Medium 4.3 Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) 0.2%
• CVE-2024-45732 High 7.1 Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app 0.4%