VYPR

Splunk Enterprise

by Splunk

CVEs (244)

  • CVE-2026-20253CriKEVJun 10, 2026
    Splunk
    Splunk
    risk 0.76cvss 9.8epss 0.97

    In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks…

  • CVE-2023-32707HigJun 1, 2023
    Splunk
    Splunk
    risk 0.66cvss 8.8epss 0.79

    In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by…

  • CVE-2017-17067CriNov 30, 2017
    Splunk
    Splunk
    risk 0.64cvss 9.8epss 0.03

    Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct…

  • CVE-2016-10126CriJan 10, 2017
    Splunk
    Splunk
    risk 0.64cvss 9.8epss 0.04

    Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token…

  • CVE-2023-46214HigNov 16, 2023
    Splunk
    Splunk
    risk 0.62cvss 8.0epss 0.89

    In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk…

  • CVE-2026-76312CriAug 19, 2026
    Splunk
    Splunk
    risk 0.61cvss 9.4epss 0.00

    In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language (HTML) source of a page that embeds a Splunk report could use exposed session material to access all relevant data and affect system…

  • CVE-2026-76311CriAug 19, 2026
    Splunk
    Splunk
    risk 0.61cvss 9.4epss 0.00

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for an embedded report search job and use exposed session material to access all relevant data and affect system…

  • CVE-2026-76310CriAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.61cvss 9.4epss 0.00

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report…

  • CVE-2024-36985HigJul 1, 2024
    Splunk
    Splunk
    risk 0.61cvss 8.8epss 0.06

    In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through an external lookup that references the “splunk_archiver“ application.

  • CVE-2022-43568HigNov 4, 2022
    Splunk
    Splunk
    risk 0.61cvss 8.8epss 0.43

    In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.

  • CVE-2022-43571HigNov 3, 2022
    Splunk
    Splunk
    risk 0.61cvss 8.8epss 0.14

    In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

  • CVE-2022-32158CriJun 15, 2022
    Splunk
    Splunk
    risk 0.59cvss 9.0epss 0.01

    Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute…

  • CVE-2026-76352HigAug 19, 2026
    Splunk
    Splunk
    risk 0.57cvss 8.8epss 0.00

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup through generic configuration endpoints and run an installed lookup script with the permissions of the…

  • CVE-2026-76351HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.00

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use crafted report notification data to cause Splunk Secure Gateway to…

  • CVE-2026-76350HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document Format (PDF) attachments in the email alert action workflow. When the email alert action runs, it could execute…

  • CVE-2026-76335HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the edit_manager_xml capability could write a malicious Splunk Web Manager Extensible Markup Language (XML) configuration. When the same user opens the…

  • CVE-2026-76319HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fsh_manage capability could perform Remote Code Execution through Federated Search bundle selection. This could allow for access to all relevant data and affect…

  • CVE-2026-76317HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could then access all…

  • CVE-2026-76316HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing Language (SPL) pipeline that runs when an administrator opens the Add Data forwarder workflow. The SPL…

  • CVE-2026-76315HigAug 19, 2026
    Splunk
    Splunk Enterprise
    risk 0.57cvss 8.8epss 0.01

    In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute arbitrary code on the Splunk platform instance through Splunk Web Manager Configuration. The user could then access all relevant…

Page 1 of 13