SC
Product
Splunk Cloud Platform
109
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 32Medium 71Low 5
Watch
Add Splunk Cloud Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43564 | 6.5 | Nov 4 | Denial of Service in Splunk Enterprise through search macros Affected: before 9.0.2205 |
| CVE-2026-20162 | 6.3 | Mar 11 | Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise Affected: 10.2.2510 before 10.2.2510.4; 10.1.2507 before 10.1.2507.15; 10.0.2503 before 10.0.2503.11; 9.3.2411 before 9.3.2411.123 |
| CVE-2023-22936 | 6.3 | Feb 14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an… Affected: before 9.0.2209.3 |
| CVE-2025-20378 | 6.1 | Nov 12 | In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker… Affected: 9.3.2408 before 9.3.2408.121; 9.3.2411 before 9.3.2411.111; 10.0.2503 before 10.0.2503.5 |
| CVE-2023-40592 | 6.1 | Aug 30 | In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the… Affected: through 9.0.2305.100 |
| CVE-2023-22933 | 6.1 | Feb 14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’… Affected: before 9.0.2209 |
| CVE-2023-22932 | 6.1 | Feb 14 | In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image Affected: before 9.0.2209.3 |
| CVE-2022-43568 | 6.1 | Nov 4 | Reflected Cross-Site Scripting via the radio template in Splunk Enterprise Affected: before 9.0.2205 |
| CVE-2026-20257 | 5.7 | Jun 10 | Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.13; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 9.3.2411 before 9.3.2411.132 |
| CVE-2026-20255 | 5.7 | Jun 10 | Improper Input Validation through Classic Dashboards in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.13; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 9.3.2411 before 9.3.2411.132 |
| CVE-2026-20254 | 5.7 | Jun 10 | Information Disclosure through External Content Restriction Bypass in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.13; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 9.3.2411 before 9.3.2411.132 |
| CVE-2026-20256 | 5.7 | Jun 10 | Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.13; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 9.3.2411 before 9.3.2411.132 |
| CVE-2026-20137 | 5.7 | Feb 18 | Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise Affected: 10.1.2507 before 10.1.2507.0; 10.0 before 10.0.2503.9; 9.3.2411 before 9.3.2411.112; 9.3.2408 before 9.3.2408.122 |
| CVE-2025-20232 | 5.7 | Mar 26 | In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2406.108, 9.2.2403.113, 9.1.2312.208 and 9.1.2308.212, a… Affected: 9.1.2308 before 9.1.2308.212; 9.1.2312.100 before 9.1.2312.208; 9.2.2403.100 before 9.2.2403.113; 9.2.2406.100 before 9.2.2406.108; 9.3.2408.100 before 9.3.2408.103 |
| CVE-2025-20226 | 5.7 | Mar 26 | In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a low-privileged user… Affected: 9.1.2308 before 9.1.2308.214; 9.2.2406.100 before 9.2.2406.111; 9.3.2408.100 before 9.3.2408.107 |
| CVE-2024-53244 | 5.7 | Dec 10 | In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206, a low-privileged user that does… Affected: 9.1.2312 before 9.1.2312.206; 9.2.2403 before 9.2.2403.109; 9.2.2406 before 9.2.2406.107 |
| CVE-2023-22940 | 5.7 | Feb 14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’… Affected: before 9.0.2209.3 |
| CVE-2026-20259 | 5.5 | Jun 10 | Improper Access Control in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.12; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 10.0.2503 before 10.0.2503.14; 9.3.2411 before 9.3.2411.131 |
| CVE-2026-20258 | 5.4 | Jun 10 | Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise Affected: 10.3.2512 before 10.3.2512.11; 10.2.2510 before 10.2.2510.15; 10.1.2507 before 10.1.2507.23; 9.3.2411 before 9.3.2411.132 |
| CVE-2026-20166 | 5.4 | Mar 11 | Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise Affected: 10.2.2510 before 10.2.2510.5; 10.1.2507 before 10.1.2507.16; 10.0.2503 before 10.0.2503.12 |
| CVE-2025-20382 | 5.4 | Dec 3 | In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user… Affected: 9.3.2411 before 9.3.2411.120; 10.0.2503 before 10.0.2503.8; 10.1.2507 before 10.1.2507.10 |
| CVE-2025-20368 | 5.4 | Oct 1 | In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does… Affected: 9.2.2406 before 9.2.2406.123; 9.3.2408 before 9.3.2408.118; 9.3.2411 before 9.3.2411.108 |
| CVE-2025-20367 | 5.4 | Oct 1 | In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does… Affected: 9.2.2406 before 9.2.2406.122; 9.3.2408 before 9.3.2408.119; 9.3.2411 before 9.3.2411.109 |
| CVE-2025-20324 | 5.4 | Jul 7 | In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, a low-privileged user… Affected: 9.2.2406 before 9.2.2406.119; 9.3.2408 before 9.3.2408.113; 9.3.2411 before 9.3.2411.104 |
| CVE-2025-20297 | 5.4 | Jun 2 | In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does… Affected: 9.2.2406 before 9.2.2406.118; 9.3.2408 before 9.3.2408.111; 9.3.2411 before 9.3.2411.102 |
| CVE-2024-45741 | 5.4 | Oct 14 | In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the "admin" or… Affected: 9.1.2312 before 9.1.2312.205; 9.2.2403.100 before 9.2.2403.108 |
| CVE-2024-45740 | 5.4 | Oct 14 | In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403, a low-privileged user that does not hold the "admin" or "power" Splunk roles… Affected: before 9.2.2403.100 |
| CVE-2024-36994 | 5.4 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the… Affected: 9.1.2308 through 9.1.2308.207; 9.1.2312 before 9.1.2312.200 |
| CVE-2024-36993 | 5.4 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the… Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312 before 9.1.2312.200 |
| CVE-2024-36992 | 5.4 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the… Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312 before 9.1.2312.200 |
| CVE-2022-43569 | 5.4 | Nov 4 | Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise Affected: before 9.0.2209 |
| CVE-2022-43562 | 5.4 | Nov 4 | Host Header Injection in Splunk Enterprise Affected: before 9.0.2208 |
| CVE-2025-20384 | 5.3 | Dec 3 | In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated… Affected: 9.3.2411 before 9.3.2411.117; 10.0.2503 before 10.0.2503.6; 10.1.2507 before 10.1.2507.4 |
| CVE-2025-20325 | 5.3 | Jul 7 | In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.113, and 9.2.2406.119, the software… Affected: 9.2.2406 before 9.2.2406.119; 9.3.2408 before 9.3.2408.113; 9.3.2411 before 9.3.2411.103 |
| CVE-2024-36996 | 5.3 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists… Affected: 9.1.2312 before 9.1.2312.109 |
| CVE-2023-32710 | 5.3 | Jun 1 | In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can perform an unauthorized transfer… Affected: before 9.0.2303.100 |
| CVE-2026-20144 | 4.9 | Feb 18 | Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise Affected: 10.1.2507 before 10.1.2507.11; 10.0.2503 before 10.0.2503.9; 9.3.2411 before 9.3.2411.120 |
| CVE-2025-20370 | 4.9 | Oct 1 | In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role… Affected: 9.2.2406 before 9.2.2406.123; 9.3.2408 before 9.3.2408.118; 9.3.2411 before 9.3.2411.108 |
| CVE-2025-20385 | 4.8 | Dec 3 | In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role… Affected: 9.3.2411 before 9.3.2411.117; 10.0.2503 before 10.0.2503.7; 10.1.2507 before 10.1.2507.6 |
| CVE-2022-43561 | 4.8 | Nov 3 | Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise Affected: before 9.0.2208 |
| CVE-2026-20203 | 4.3 | Apr 15 | Improper Access Control in Data Model Acceleration in Splunk Enterprise Affected: 10.4.2603 before Not Affected; 10.3.2512 before 10.3.2512.6; 10.2.2510 before 10.2.2510.10; 10.1.2507 before 10.1.2507.19; 10.0.2503 before 10.0.2503.13; 9.3.2411 before 9.3.2411.127 |
| CVE-2026-20139 | 4.3 | Feb 18 | Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise Affected: 10.2.2510 before 10.2.2510.3; 10.1.2507 before 10.1.2507.8; 10.0.2503 before 10.0.2503.9; 9.3.2411 before 9.3.2411.121 |
| CVE-2025-20383 | 4.3 | Dec 3 | In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged… Affected: 9.3.2411 before 9.3.2411.120; 10.0.2503 before 10.0.2503.8; 10.1.2507 before 10.1.2507.6 |
| CVE-2025-20322 | 4.3 | Jul 7 | In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an unauthenticated… Affected: 9.2.2406 before 9.2.2406.119; 9.3.2408 before 9.3.2408.113; 9.3.2411 before 9.3.2411.104 |
| CVE-2025-20321 | 4.3 | Jul 7 | In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated… Affected: 9.2.2406 before 9.2.2406.119; 9.3.2408 before 9.3.2408.114; 9.3.2411 before 9.3.2411.104 |
| CVE-2025-20300 | 4.3 | Jul 7 | In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user… Affected: 9.2.2406 before 9.2.2406.118; 9.3.2408 before 9.3.2408.112; 9.3.2411 before 9.3.2411.103 |
| CVE-2025-20227 | 4.3 | Mar 26 | In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and… Affected: 9.1.2308 before 9.1.2308.214; 9.1.2312 before 9.1.2312.208; 9.2.2403 before 9.2.2403.115; 9.2.2406.100 before 9.2.2406.113; 9.3.2408.100 before 9.3.2408.107 |
| CVE-2024-53245 | 4.3 | Dec 10 | In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“… Affected: 9.1.2312 before 9.1.2312.206 |
| CVE-2024-45735 | 4.3 | Oct 14 | In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions below 3.4.259, 3.6.17, and 3.7.0, a low-privileged user… Affected: before 3.4.259; 3.6.0 before 3.6.17 |
| CVE-2023-32717 | 4.3 | Jun 1 | On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the… Affected: before 9.0.2303.100 |