Splunk Splunk Enterprise

• CVE-2025-20297 Medium 4.3 Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component 31.2%
• CVE-2025-20230 Medium 4.3 Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App 0.3%
• CVE-2025-20232 Medium 5.7 Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise 0.5%
• CVE-2025-20229 High 8.0 Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise 16.0%
• CVE-2025-20228 Medium 6.5 Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise 0.2%
• CVE-2025-20227 Medium 4.3 Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio 0.4%
• CVE-2025-20226 Medium 5.7 Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise 0.5%
• CVE-2025-20231 High 7.1 Sensitive Information Disclosure in Splunk Secure Gateway App 0.5%
• CVE-2024-53244 Medium 5.7 Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter 0.5%
• CVE-2024-53246 Medium 5.3 Sensitive Information Disclosure through SPL commands 0.3%
• CVE-2024-53243 Medium 4.3 Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway 0.3%
• CVE-2024-53245 Low 3.1 Information Disclosure due to Username Collision with a Role that has the same Name as the User 0.4%
• CVE-2024-53247 High 8.8 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app 1.1%
• CVE-2024-45739 Medium 4.9 Sensitive information disclosure in AdminManager logging channel 0.5%
• CVE-2024-45738 Medium 4.9 Sensitive information disclosure in REST_Calls logging channel 0.5%
• CVE-2024-45737 Medium 4.3 Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF) 0.2%
• CVE-2024-45733 High 8.8 Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows 1.1%
• CVE-2024-45732 High 7.1 Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app 0.4%
• CVE-2024-45736 Medium 6.5 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon 0.5%
• CVE-2024-45741 Medium 5.4 Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise 14.8%
• CVE-2024-45734 Medium 4.3 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard 0.3%
• CVE-2024-45740 Medium 5.4 Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise 0.4%
• CVE-2024-45731 High 8.0 Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk 0.6%
• CVE-2024-45735 Medium 4.3 Improper Access Control for low-privileged user in Splunk Secure Gateway App 0.3%
• CVE-2024-36997 Medium 4.6 Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint 0.5%
• CVE-2024-36993 Medium 5.4 Persistent Cross-site Scripting (XSS) in Web Bulletin 0.4%
• CVE-2024-36995 Medium 4.3 Low-privileged user could create experimental items 0.2%
• CVE-2024-36982 High 7.5 Denial of Service through null pointer reference in “cluster/config” REST endpoint 0.5%
• CVE-2024-36991 High 7.5 Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows 13.0%
• CVE-2024-36990 Medium 6.5 Denial of Service (DoS) on the datamodel/web REST endpoint 0.7%
• CVE-2024-36985 High 8.8 Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise 6.5%
• CVE-2024-36992 Medium 5.4 Persistent Cross-site Scripting (XSS) in Dashboard Elements 0.3%
• CVE-2024-36984 High 8.8 Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows 1.4%
• CVE-2024-36986 Medium 6.3 Risky command safeguards bypass through Search ID query in Analytics Workspace 0.4%
• CVE-2024-36983 High 8.0 Command Injection using External Lookups 1.0%
• CVE-2024-36996 Medium 5.3 Information Disclosure of user names 0.4%
• CVE-2024-36994 Medium 5.4 Persistent Cross-site Scripting (XSS) in Dashboard Elements 0.3%
• CVE-2024-36989 Medium 6.5 Low-privileged user could create notifications in Splunk Web Bulletin Messages 0.3%
• CVE-2024-36987 Medium 4.3 Insecure File Upload in the indexing/preview REST endpoint 0.3%
• CVE-2024-29945 High 7.2 Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise 0.9%
• CVE-2024-29946 High 8.1 Risky command safeguards bypass in Dashboard Examples Hub 0.8%
• CVE-2024-23678 High 7.5 Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition 0.2%
• CVE-2024-23676 Medium 4.6 Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command 0.3%
• CVE-2024-23677 Medium 4.3 Server Response Disclosure in RapidDiag Salesforce.com Log File 0.4%
• CVE-2024-23675 Medium 6.5 Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion 0.4%
• CVE-2023-46213 Medium 4.8 Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page 0.5%
• CVE-2023-46214 High 8.0 Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing 89.2%
• CVE-2023-40597 High 7.8 Absolute Path Traversal in Splunk Enterprise Using runshellscript.py 0.2%
• CVE-2023-40596 High 7.0 Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL 0.2%
• CVE-2023-40593 Medium 6.3 Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request 0.6%