Skip to content
OpenAdvisories
Medium WID-SEC-2026-1139 3 CVEs

Splunk Splunk Enterprise: Mehrere Schwachstellen

Published Apr 15, 2026 · Updated Apr 15, 2026 · de-DE

Vendor: Splunk Product: Enterprise Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und beliebigen Code auszuführen.

Product

Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Vulnerabilities 3

  • High 7.1
    CVE-2026-20204

    Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the `admin` or `powe…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.6
    CVE-2026-20202

    Improper Input Validation during User Account Creation in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a role that contains the high-privilege cap…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2026-20203

    Improper Access Control in Data Model Acceleration in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the `admin` or `pow…

    Splunk Splunk Enterprise Splunk Cloud Platform

Revision history

  1. #1

    Initiale Fassung

References