Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Splunk Cloud Platform 10.1.2507.23, 10.2.2510.15 and 2 more versions Clear all filters
TI-2026-16448 CVE-2026-20257 · GHSA-73fj-f5qc-x4jf

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Priority LOW 25

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00293 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16446 CVE-2026-20255 · GHSA-hw35-mvfj-v86g

Improper Input Validation through Classic Dashboards in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00351 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16445 CVE-2026-20254 · GHSA-c58f-cc4q-2mvj

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00408 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16447 CVE-2026-20256 · GHSA-p326-4xf8-xp88

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00361 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20