Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-20371Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise
- CVE-2025-20367Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise
- CVE-2025-20370Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise
- CVE-2025-20366Improper Access Control in Background Job Submission in Splunk Enterprise
- CVE-2025-20369Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise
- CVE-2025-20322Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise
- CVE-2025-20323Missing Access Control of Saved Searches in the Splunk Archiver app
- CVE-2025-20321Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
- CVE-2025-20325Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise
- CVE-2025-20319Remote Command Execution through Scripted Input Files in Splunk Enterprise
- CVE-2025-20324Improper Access Control in System Source Types Configuration in Splunk Enterprise
- CVE-2025-20320Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise
- CVE-2025-20300Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise
- CVE-2025-20298Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade
- CVE-2025-20297Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component
- CVE-2025-20230Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App
- CVE-2025-20233Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing
- CVE-2025-20232Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise
- CVE-2025-20229Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise
- CVE-2025-20228Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
- CVE-2025-20227Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio
- CVE-2025-20226Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise
- CVE-2025-20231Sensitive Information Disclosure in Splunk Secure Gateway App
- CVE-2025-0367Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)
- CVE-2025-22621Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR
- CVE-2024-53244Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter
- CVE-2024-53246Sensitive Information Disclosure through SPL commands
- CVE-2024-53243Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway
- CVE-2024-53245Information Disclosure due to Username Collision with a Role that has the same Name as the User
- CVE-2024-53247Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app