SP
Product
Splunk
On CISA KEVExploited in the wild
286
CVEs
2
On KEV
10.0
Max CVSS
22
New 30D
Severity mix
Critical 12High 89Medium 149Low 9
Watch
Add Splunk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76348 | 3.8 | Aug 19 | Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise Affected: 9.4.0 before 9.4.14; 10.0.0 before 10.0.9; 10.2.0 before 10.2.6; 10.4.0 before 10.4.2 |
| CVE-2025-20379 | 3.5 | Nov 12 | In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a… Affected: 9.2.0 before 9.2.9; 9.3.0 before 9.3.7; 9.4.0 before 9.4.5; 10.0.0 |
| CVE-2024-45737 | 3.5 | Oct 14 | In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the… Affected: 9.1.0 before 9.1.6; 9.2.0 before 9.2.3; 9.3.0 |
| CVE-2024-36995 | 3.5 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the… Affected: 9.0.0 before 9.0.10; 9.1.0 before 9.1.5; 9.2.0 before 9.2.2 |
| CVE-2024-23676 | 3.5 | Jan 22 | In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view Affected: 9.0.0 before 9.0.8; 9.1.0 before 9.1.3 |
| CVE-2022-37438 | 3.5 | Aug 16 | In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real… Affected: 8.1.0 before 8.1.11; 8.2.0 before 8.2.7.1; 9.0.0 |
| CVE-2017-5607 | 3.5 | Apr 10 | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk… Affected: through 6.5.1; 5.0.0 before 5.0.18; 6.0.0 before 6.0.14; 6.1.0 before 6.1.13; 6.2.0 before 6.2.13.1; 6.3.0 before 6.3.10; +2 more |
| CVE-2023-32712 | 3.1 | Jun 1 | In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files that,… Affected: 8.1.0 before 8.1.14; 8.2.0 before 8.2.11; 9.0.0 before 9.0.5 |
| CVE-2025-20388 | 2.7 | Dec 3 | In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role… Affected: 9.2.0 before 9.2.10; 9.3.0 before 9.3.8; 9.4.0 before 9.4.6; 10.0.0 |
| CVE-2015-7604 | – | Sep 29 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x before 6.2.6 allows remote attackers to inject arbitrary web… Affected: 6.2.0; 6.2.0; 6.2.1; 6.2.1; 6.2.2; 6.2.2; +6 more |
| CVE-2015-6515 | – | Aug 18 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6.1.x before 6.1.8, 6.0.x before 6.0.9, and 5.0.x before 5.0.13 and Splunk Light… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +32 more |
| CVE-2015-6514 | – | Aug 18 | Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4 and Splunk Light 6.2.x before 6.2.4 allows remote authenticated users to inject… Affected: 6.2.0; 6.2.0; 6.2.1; 6.2.1; 6.2.2; 6.2.2; +2 more |
| CVE-2014-5466 | – | Dec 16 | Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +16 more |
| CVE-2014-8380 | – | Oct 21 | Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer Header in a "404 Not Found" response Affected: 6.1.1 |
| CVE-2014-8303 | – | Oct 16 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +4 more |
| CVE-2014-8302 | – | Oct 16 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +15 more |
| CVE-2014-8301 | – | Oct 16 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +4 more |
| CVE-2014-3147 | – | Oct 10 | Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML… Affected: through 6.0.3; 6.0.0; 6.0.1; 6.0.2 |
| CVE-2014-5198 | – | Aug 12 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP… Affected: 6.1; 6.1.1; 6.1.2 |
| CVE-2014-5197 | – | Aug 12 | Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary… Affected: 6.1; 6.1.1; 6.1.2 |
| CVE-2013-7394 | – | Aug 7 | The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string Affected: through 5.0.4; 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2013-6771 | – | Aug 7 | Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a Affected: through 5.0.4; 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2014-2578 | – | Apr 2 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 5.0.7; 5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +2 more |
| CVE-2012-6447 | – | Jan 23 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2013-6870 | – | Nov 25 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: through 5.0.5; 2.1; 2.2; 2.2.1; 2.2.3; 2.2.6; +34 more |
| CVE-2013-2766 | – | Apr 10 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 4.3; 4.3.1; 4.3.2; 4.3.3; 4.3.4; 4.3.5 |
| CVE-2012-1908 | – | Aug 17 | Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +21 more |
| CVE-2011-4778 | – | Jan 3 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka… Affected: 4.2; 4.2.1; 4.2.2; 4.2.3; 4.2.4 |
| CVE-2011-4644 | – | Jan 3 | Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication,… Affected: through 4.2.5; 2.1; 2.2; 2.2.1; 2.2.3; 2.2.6; +34 more |
| CVE-2011-4643 | – | Jan 3 | Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +20 more |
| CVE-2011-4642 | – | Jan 3 | mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators… Affected: 4.2; 4.2.1; 4.2.2; 4.2.3; 4.2.4 |
| CVE-2010-3323 | – | Sep 14 | Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +11 more |
| CVE-2010-2504 | – | Jun 28 | Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066 Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2010-2503 | – | Jun 28 | Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via (1)… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2010-2502 | – | Jun 28 | Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more |
| CVE-2010-2429 | – | Jun 24 | Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |