Splunk Cloud Platform

CVEs (119)

• CVE-2023-32707HigJun 1, 2023
  Splunk

  Splunk
  risk 0.66cvss 8.8epss 0.79

  In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by…

• CVE-2023-46214HigNov 16, 2023
  Splunk

  Splunk
  risk 0.62cvss 8.0epss 0.89

  In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk…

• CVE-2022-43568HigNov 4, 2022
  Splunk

  Splunk
  risk 0.61cvss 8.8epss 0.43

  In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.

• CVE-2022-43571HigNov 3, 2022
  Splunk

  Splunk
  risk 0.61cvss 8.8epss 0.13

  In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

• CVE-2026-20251HigJun 10, 2026
  Splunk

  Splunk
  risk 0.57cvss 8.8epss 0.19

  In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user that does not hold…

• CVE-2023-40595HigAug 30, 2023
  Splunk

  Splunk
  risk 0.57cvss 8.8epss 0.01

  In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.

• CVE-2023-22932HigFeb 14, 2023
  Splunk

  Splunk
  risk 0.57cvss 8.7epss 0.00

  In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image. The vulnerability affects instances with Splunk Web enabled. It does not affect Splunk Enterprise versions below 9.0.

• CVE-2022-43570HigNov 4, 2022
  Splunk

  Splunk
  risk 0.57cvss 8.8epss 0.01

  In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE) injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error.

• CVE-2022-43567HigNov 4, 2022
  Splunk

  Splunk
  risk 0.57cvss 8.8epss 0.01

  In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.

• CVE-2023-40598HigAug 30, 2023
  Splunk

  Splunk
  risk 0.55cvss 8.5epss 0.01

  In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From there, a user can…

• CVE-2023-40592HigAug 30, 2023
  Splunk

  Splunk
  risk 0.55cvss 8.4epss 0.01

  In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/search/table” web endpoint. Exploitation of this vulnerability can lead to the execution of…

• CVE-2025-20229HigMar 26, 2025
  Splunk

  Splunk
  risk 0.53cvss 8.0epss 0.14

  In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2.2406.108, 9.2.2403.114, and 9.1.2312.208, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution…

• CVE-2024-36997HigJul 1, 2024
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could…

• CVE-2024-29946HigMar 27, 2024
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phish the victim by…

• CVE-2023-22939HigFeb 14, 2023
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their browser and only…

• CVE-2023-22935HigFeb 14, 2023
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their…

• CVE-2022-43565HigNov 4, 2022
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The…

• CVE-2022-43563HigNov 4, 2022
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires…

• CVE-2022-32153HigJun 15, 2022
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates…

• CVE-2022-32152HigJun 15, 2022
  Splunk

  Splunk
  risk 0.53cvss 8.1epss 0.01

  Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates…