Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

109 records

Priority LOW 31

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2026-07-15 Fixed in 10.4.1, 10.2.5 +7 CWE-200
Priority LOW 37

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00182 Published 2026-07-15 Fixed in 10.4.1, 10.2.5 +7 CWE-352
Priority LOW 34

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1.2507.24, a user who holds a role that contains the…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00571 Published 2026-07-15 Fixed in 10.4.1, 10.2.5 +7 CWE-22
Priority LOW 33

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00236 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-79
Priority LOW 33

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user that does no…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00347 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +7 CWE-918
Priority LOW 25

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00293 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16450 CVE-2026-20259 · GHSA-jhf8-vwfv-vr95

Improper Access Control in Splunk Enterprise

Priority LOW 24

In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds a Splunk role that c…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00189 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +5 CWE-284
Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00351 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
Priority MEDIUM 64

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30645 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +9 CWE-502
Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00408 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00361 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
Priority LOW 35

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00485 Published 2026-05-20 Fixed in 10.2.2, 10.0.5 +4 CWE-532
Priority LOW 31

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, and 9.3.2411.129, a low-privileged user…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00396 Published 2026-05-20 Fixed in 10.2.2, 10.0.5 +8 CWE-20
Priority LOW 19

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00152 Published 2026-04-15 Fixed in 10.2.2, 10.0.5 +8 CWE-284
Priority LOW 39

In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.03098 Published 2026-04-15 Fixed in 10.2.1, 10.0.5 +8 CWE-377
Priority LOW 31

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a ro…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00246 Published 2026-04-15 Fixed in 10.2.2, 10.0.5 +8 CWE-176
Priority LOW 38

In Splunk Enterprise versions below 10.2.0, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.0.2503.12, 10.1.2507.16, and 9.3.2411.124, a user who holds a role that contains the high-pr…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00537 Published 2026-03-11 Fixed in 10.0.4, 9.4.9 +5 CWE-77
Priority LOW 28

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.123, a low-privileged user who does not hold the "admin…

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00239 Published 2026-03-11 Fixed in 10.0.3, 9.4.9 +5 CWE-79
Priority LOW 24

In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that does not hold the "admin" or "power" Splunk roles co…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00178 Published 2026-03-11 Fixed in 10.2.1, 10.0.4 +3 CWE-200
Priority LOW 28

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-privileged user that does not hold the "adm…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00265 Published 2026-03-11 Fixed in 10.0.3, 9.4.9 +5 CWE-200
Priority LOW 28

In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-privileged user that does not hold the "adm…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00193 Published 2026-03-11 Fixed in 10.2.1, 10.0.4 +6 CWE-532
Priority LOW 29

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a low-privileged user that does not hold the…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.05677 Published 2026-02-18 Fixed in 10.0.2, 9.4.8 +6 CWE-400
Priority LOW 32

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a user of a Splunk Search Head Cluster (SHC…

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00344 Published 2026-02-18 Fixed in 10.0.2, 9.4.7 +5 CWE-532
Priority LOW 25

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a low-privileged user who does not hold the…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00264 Published 2026-02-18 Fixed in 10.2.0, 10.0.3 +7 CWE-200
Priority LOW 14

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capabili…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00375 Published 2025-12-03 Fixed in 10.0.1, 9.4.6 +5 CWE-918
Load more