Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Splunk Enterprise 10.0.7, 10.2.4 and 2 more versions Clear all filters
TI-2026-16449 CVE-2026-20258 · GHSA-xg25-vr2h-r356

Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Priority LOW 33

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00236 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-79
TI-2026-16443 CVE-2026-20252 · GHSA-6722-h93g-5wxq

Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Priority LOW 33

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user that does no…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00347 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +7 CWE-918
TI-2026-16448 CVE-2026-20257 · GHSA-73fj-f5qc-x4jf

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Priority LOW 25

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00293 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16446 CVE-2026-20255 · GHSA-hw35-mvfj-v86g

Improper Input Validation through Classic Dashboards in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00351 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16442 CVE-2026-20251 · GHSA-3crw-7xg9-fpxg

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

Priority MEDIUM 64

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30645 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +9 CWE-502
TI-2026-16445 CVE-2026-20254 · GHSA-c58f-cc4q-2mvj

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00408 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20
TI-2026-16447 CVE-2026-20256 · GHSA-p326-4xf8-xp88

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'a…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00361 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +6 CWE-20