Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.0.8, 10.2.5 and 2 more versions Clear all filters
TI-2026-16485 CVE-2026-20298 · GHSA-xqm2-gqcq-fc3q

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Priority LOW 31

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2026-07-15 Fixed in 10.4.1, 10.2.5 +7 CWE-200
TI-2026-16483 CVE-2026-20296 · GHSA-hxgj-4vg5-fpww

SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Priority LOW 37

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and 10.1.2507.24, an attacker could trick a user that…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00182 Published 2026-07-15 Fixed in 10.4.1, 10.2.5 +7 CWE-352