Priority MEDIUM 40
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use crafted…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00417 · Published 2026-08-19 · Fixed in 10.4.2, 10.2.6 +5 CWE-918
Priority LOW 24
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could use Server-S…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00287 · Published 2026-08-19 · Fixed in 10.4.2, 10.2.6 +5 CWE-918
Priority LOW 28
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, an unauthenticated user could trick a user who holds the "admin" or "sc_admin"…
CVSS 3.1MEDIUM 6.4· Network · No auth · User interaction · EPSS 0.00256 · Published 2026-08-19 · Fixed in 10.4.2, 10.2.6 +5 CWE-943
Priority LOW 29
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read Spacebr…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00291 · Published 2026-08-19 · Fixed in 10.4.2, 10.2.6 +5 CWE-732
Priority LOW 20
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the "admin" or "power" Splunk roles could read sensiti…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00301 · Published 2026-08-19 · Fixed in 10.4.2, 10.2.6 +5 CWE-200