Skip to content
OpenAdvisories
Medium WID-SEC-2026-0696 5 CVEs

Splunk Splunk Enterprise: Mehrere Schwachstellen

Published Mar 11, 2026 · Updated Mar 11, 2026 · de-DE

Vendor: Splunk Product: Enterprise Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Vulnerabilities 5

  • High 8.0
    CVE-2026-20163

    Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.0.2503.12, 10.1.2507.16, and 9.3.2411.124, a user who holds a role that contains the high-privilege capability `edit_cmd` could exe…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2026-20164

    Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-privileged user that does not hold the "admin" or "power" Splunk roles could acces…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.3
    CVE-2026-20162

    Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.3
    CVE-2026-20165

    Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retri…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2026-20166

    Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

    In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve the Observability Cloud AP…

    Splunk Splunk Enterprise Splunk Cloud Platform

Revision history

  1. #1

    Initiale Fassung

References