Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Splunk

Splunk Splunk Cloud Platform vulnerabilities

86 published CVEs name Splunk Splunk Cloud Platform among the affected products.

Newest CVEs

  • CVE-2026-20298

    Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

    Splunk · Splunk Enterprise

    Medium5.3
  • CVE-2026-20296

    SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

    Splunk · Splunk Enterprise

    High8.3
  • CVE-2026-20297

    Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

    Splunk · Splunk Enterprise

    High7.2
  • CVE-2026-20258

    Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

    Splunk · Splunk Enterprise

    High7.1
  • CVE-2026-20252

    Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

    Splunk · Splunk Enterprise

    High7.6
  • CVE-2026-20257

    Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

    Splunk · Splunk Enterprise

    Medium5.7
  • CVE-2026-20259

    Improper Access Control in Splunk Enterprise

    Splunk · Splunk Enterprise

    Medium5.5
  • CVE-2026-20255

    Improper Input Validation through Classic Dashboards in Splunk Enterprise

    Splunk · Splunk Enterprise

    Medium5.7
  • CVE-2026-20251

    Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

    Splunk · Splunk Enterprise

    High8.8
  • CVE-2026-20254

    Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

    Splunk · Splunk Enterprise

    Medium5.7