Known vulnerabilities in Splunk MCP Server

Vendor: Splunk Inc.
Software: Splunk MCP Server
Software CPE: cpe:2.3:a:splunk:splunk_mcp_server:*:*:*:*:*:*:*:*
Website: https://www.splunk.com/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Splunk MCP Server Splunk MCP Server is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126415 - Information Exposure Through Log Files
CVE-2026-20205		 CWE-532 Low
No
No
 1.0.3 17.04.2026 SB2026041761
#VU119141 - Incorrect Authorization
CVE-2025-20381		 CWE-863 Medium
No
No
 0.2.4 04.12.2025 SB2025120436