SC
Product
Splunk Cloud Platform
109
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 32Medium 71Low 5
Watch
Add Splunk Cloud Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32709 | 4.3 | Jun 1 | In Splunk Enterprise versions below 9.0.5, 8.2.11 Affected: before 9.0.2303.100 |
| CVE-2023-22938 | 4.3 | Feb 14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance Affected: before 9.0.2209.3 |
| CVE-2023-22937 | 4.3 | Feb 14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions Affected: before 9.0.2209.3 |
| CVE-2023-22931 | 4.3 | Feb 14 | In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without… Affected: before 8.2.2203 |
| CVE-2025-20379 | 3.5 | Nov 12 | In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a… Affected: 9.3.2408 before 9.3.2408.124; 9.3.2411 before 9.3.2411.116; 10.0.2503 before 10.0.2503.5; 10.1.2507 before 10.1.2507.1 |
| CVE-2024-45737 | 3.5 | Oct 14 | In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the… Affected: 9.1.2312 before 9.1.2312.204; 9.2.2403.102 before 9.2.2403.108 |
| CVE-2024-36995 | 3.5 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the… Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312 before 9.1.2312.200 |
| CVE-2022-37438 | 3.5 | Aug 16 | In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real… Affected: through 8.2.2203.4 |
| CVE-2025-20388 | 2.7 | Dec 3 | In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role… Affected: 9.3.2411 before 9.3.2411.116; 10.0.2503 before 10.0.2503.6; 10.1.2507 before 10.1.2507.4 |