Skip to content
OpenAdvisories
High WID-SEC-2026-2370 3 CVEs

Splunk Splunk Enterprise: Mehrere Schwachstellen

Published Jul 15, 2026 · Updated Jul 15, 2026 · de-DE

Vendor: Splunk Product: Enterprise Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Vulnerabilities 3

  • High 8.3
    CVE-2026-20296

    SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

    In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that holds a role with the `list_deployment…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • High 7.2
    CVE-2026-20297

    Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

    In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the `edit_local_apps` and `install_apps` c…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.3
    CVE-2026-20298

    Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

    In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk rol…

    Splunk Splunk Enterprise Splunk Cloud Platform

Revision history

  1. #1

    Initiale Fassung

References