Known vulnerabilities in Splunk Enterprise
Vendor:
Splunk Inc.
Software:
Splunk Enterprise
Software CPE:
cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
532
Public exploits:
25
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.4.14
10.0.9
10.2.6
10.4.2
9.3.14
9.4.13
10.0.8
10.2.5
10.4.1
9.3.13
9.4.12
10.2.4
10.0.7
10.4.0
9.3.12
9.4.11
10.0.6
10.2.3
9.3.11
9.4.10
10.0.5
10.2.2
9.3.10
9.4.9
10.0.4
10.2.1
9.2.11
9.4.7
9.2.12
9.3.9
9.4.8
10.0.3
10.2.0
9.2.10
9.3.8
9.4.6
10.0.2
9.4.5
9.3.7
9.2.9
9.2.8
9.3.6
9.4.4
10.0.1
10.0.0
9.4.3
9.3.5
9.2.7
9.1.10
9.4.2
9.3.4
9.2.6
9.1.9
9.4.1
9.3.3
9.2.5
9.1.8
9.4.0
9.3.2
9.2.4
9.1.7
9.3.1
9.2.3
9.1.6
9.0.10
9.1.5
9.2.2
9.3.0
9.2.1
9.1.4
9.0.9
9.2.0
9.1.3
9.0.8
9.1.2
9.0.7
9.1.1
9.0.6
8.2.12
9.1.0
9.0.5
8.2.11
8.1.14
7.1.1
9.0.4
8.2.10
8.1.13
9.0.3
9.0.2
8.2.9
8.1.12
8.2.8
8.2.7.1
8.1.11
9.0.1
9.0.0
8.2.7
8.2.6
8.2.5
8.2.4
8.2.3
8.2.2
8.2.1
8.2.0
8.1.10
8.1.9
8.1.8
8.1.7
8.1.6
8.1.5
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.3.9
7.3.8
7.3.7
7.3.6
7.3.5
7.3.4
7.3.3
7.3.2
7.3.1
7.3.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.0.1
6.1.14
6.0.15
5.0.19
5.0.0
6.1.0
6.0.0
6.3.0
6.2.14
6.2.0
7.0.1
6.3.12
6.4.9
6.5.6
6.6.4
6.6.3.2
6.3.11
6.4.8
6.4.7
6.5.5
6.5.4
6.5.3
7.0.0
6.6.3
6.6.2
6.6.1
6.6
6.5.2
6.5.1
6.5.0
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.3.10
6.3.9
6.3.8
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.1.13
6.1.12
6.1.11
6.1.10
6.1.9
6.1.8
6.1.7
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
5.0.18
5.0.17
5.0.16
5.0.15
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
Vulnerabilities (532)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144457 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-76324 |
CWE-79 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144458 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-76325 |
CWE-79 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-76326 |
CWE-79 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144460 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76327 |
CWE-943 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144461 - Command injection CVE-2026-76328 |
CWE-77 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144462 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76329 |
CWE-943 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144463 - Improper input validation CVE-2026-76330 |
CWE-20 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144464 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-76331 |
CWE-943 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144465 - Improper input validation CVE-2026-76332 |
CWE-20 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-76333 |
CWE-79 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144467 - Cross-Site Request Forgery (CSRF) CVE-2026-76334 |
CWE-352 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144468 - Improper Control of Generation of Code ('Code Injection') CVE-2026-76335 |
CWE-94 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144469 - Missing Authorization CVE-2026-76336 |
CWE-862 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144470 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-76337 |
CWE-22 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144471 - Command injection CVE-2026-76339 |
CWE-77 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144472 - Missing Authorization CVE-2026-76340 |
CWE-862 | Medium | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144473 - Incorrect Authorization CVE-2026-76341 |
CWE-863 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144474 - Incorrect Authorization CVE-2026-76342 |
CWE-863 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144475 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-76343 |
CWE-89 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
||
| #VU144476 - Path Traversal: \'dir/../../filename\' CVE-2026-76344 |
CWE-27 | Low | 9.4.14, 10.0.9, 10.2.6, 10.4.2 | 20.08.2026 |
SB2026082083 |
Showing elements 1 - 20 out of 532