Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority MEDIUM 40

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use crafted…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-918
Priority LOW 24

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-S…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-918
Priority LOW 28

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, an unauthenticated user could trick a user who holds the "admin" or "sc_admin"…

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00256 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-943
Priority LOW 29

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read Spacebr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00291 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-732
Priority LOW 20

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read sensiti…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00301 Published 2026-08-19 Fixed in 10.4.2, 10.2.6 +5 CWE-200