Skip to content
OpenAdvisories

Product · Splunk

Splunk Cloud Platform

89 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-20298

    Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

    In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk rol…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20257

    Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.5
    CVE-2026-20259

    Improper Access Control in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds a Splunk role that contains the high-privilege capability `…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20255

    Improper Input Validation through Classic Dashboards in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20254

    Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20256

    Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could cau…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2026-20203

    Improper Access Control in Data Model Acceleration in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the `admin` or `pow…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.6
    CVE-2026-20202

    Improper Input Validation during User Account Creation in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a role that contains the high-privilege cap…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.3
    CVE-2026-20162

    Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin" or "power" Splunk roles could craft a…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2026-20166

    Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

    In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve the Observability Cloud AP…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2026-20164

    Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-privileged user that does not hold the "admin" or "power" Splunk roles could acces…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.3
    CVE-2026-20165

    Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retri…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2026-20139

    Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.8
    CVE-2026-20144

    Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with acce…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2025-20389

    Improper Input Validation in "label" column field in Splunk Secure Gateway App

    In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cr…

    Splunk Splunk Enterprise Splunk Cloud Platform Splunk Secure Gateway
  • Medium 4.3
    CVE-2025-20383

    Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

    In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mo…

    Splunk Splunk Enterprise Splunk Cloud Platform Splunk Secure Gateway
  • Medium 5.3
    CVE-2025-20384 Public exploit

    Unauthenticated Log Injection in Splunk Enterprise

    In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes int…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2025-20368

    Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

    In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2025-20367

    Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise

    In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could craft a malicious payload thro…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2025-20366

    Improper Access Control in Background Job Submission in Splunk Enterprise

    In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles could access sensitive search results …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.6
    CVE-2025-20369

    Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

    In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup l…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2025-20300

    Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise

    In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only access to…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2025-20297 EPSS 34%

    Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

    In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload thro…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2025-20232

    Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

    In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2406.108, 9.2.2403.113, 9.1.2312.208 and 9.1.2308.212, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could ru…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2025-20228

    Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

    In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Ke…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2025-20227

    Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

    In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2025-20226

    Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

    In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could run a saved search wit…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2024-53244

    Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

    In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search with a ris…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.3
    CVE-2024-53246

    Sensitive Information Disclosure through SPL commands

    In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the expl…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2024-45737

    Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

    In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could change the maintenance mode state of App Ke…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2024-45736

    Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

    In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a search query with an …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2024-45741 EPSS 15%

    Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

    In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a malicious payload through a custom configur…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2024-45740

    Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

    In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through Scheduled Views that could result in ex…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.6
    CVE-2024-36997

    Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST en…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2024-36993

    Persistent Cross-site Scripting (XSS) in Web Bulletin

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a Splunk Web …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 4.3
    CVE-2024-36995

    Low-privileged user could create experimental items

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could create experimental items.

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.5
    CVE-2024-36990

    Denial of Service (DoS) on the datamodel/web REST endpoint

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that does not hold the admin or power Splunk roles could send a specially crafted HTTP POST request to th…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.4
    CVE-2024-36992

    Persistent Cross-site Scripting (XSS) in Dashboard Elements

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a View that c…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 6.3
    CVE-2024-36986

    Risky command safeguards bypass through Search ID query in Analytics Workspace

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privileged user to bypass SPL safeguards for …

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.3
    CVE-2024-36996

    Information Disclosure of user names

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists on the instance by deciphering the error response that they would likely receive…

    Splunk Splunk Enterprise Splunk Cloud Platform