Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 29

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +8 CWE-20
Priority LOW 37

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwar…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00495 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +2 CWE-732
Priority LOW 20

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00325 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +8 CWE-200
Priority LOW 37

In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Splunk Enterprise for Win…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00495 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +2 CWE-732
Priority LOW 22

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role with a high privilege capability `admin_a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00296 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +5 CWE-79
Priority LOW 24

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user that does not hold the "admin" or "power"…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00243 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +5 CWE-601