Known vulnerabilities in Splunk Enterprise

Software CPE: cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 532
Public exploits: 25
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk Enterprise Splunk Enterprise is affected by 532 known vulnerabilities: 31 high, 315 medium, 186 low Critical High Medium Low

Vulnerabilities (532)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144457 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76324
CWE-79 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144458 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76325
CWE-79 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144459 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76326
CWE-79 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144460 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-76327
CWE-943 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144461 - Command injection
CVE-2026-76328
CWE-77 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144462 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-76329
CWE-943 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144463 - Improper input validation
CVE-2026-76330
CWE-20 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144464 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-76331
CWE-943 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144465 - Improper input validation
CVE-2026-76332
CWE-20 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144466 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76333
CWE-79 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144467 - Cross-Site Request Forgery (CSRF)
CVE-2026-76334
CWE-352 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144468 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-76335
CWE-94 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144469 - Missing Authorization
CVE-2026-76336
CWE-862 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144470 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-76337
CWE-22 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144471 - Command injection
CVE-2026-76339
CWE-77 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144472 - Missing Authorization
CVE-2026-76340
CWE-862 Medium
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144473 - Incorrect Authorization
CVE-2026-76341
CWE-863 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144474 - Incorrect Authorization
CVE-2026-76342
CWE-863 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144475 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-76343
CWE-89 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083
#VU144476 - Path Traversal: \'dir/../../filename\'
CVE-2026-76344
CWE-27 Low
No
No
9.4.14, 10.0.9, 10.2.6, 10.4.2 20.08.2026 SB2026082083


Showing elements 1 - 20 out of 532