Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Splunk Enterprise — Vulnerabilities & Security Advisories 221

All 221 CVE vulnerabilities found in Splunk Enterprise, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities for Splunk Enterprise, focusing on the Splunk vendor and common weakness types. It collects security advisories, including denial-of-service conditions, authentication flaws, and injection issues, covering the period from the product's initial release through the most recent updates. Readers can track the vendor's published advisories, understand specific weakness classes affecting this product line, and review the historical vulnerability record to assess long-term security trends. The data is organized by vulnerability type and date, enabling efficient filtering without requiring knowledge of individual CVE identifiers.

Vendor: Splunk Inc.

CVE ID Title CVSS Severity Published
CVE-2025-20387 Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade CWE-732 8.0 High 2025-12-03
CVE-2025-20383 Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app CWE-200 4.3 Medium 2025-12-03
CVE-2025-20384 Unauthenticated Log Injection in Splunk Enterprise CWE-117 5.3 Medium 2025-12-03
CVE-2025-20386 Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade CWE-732 8.0 High 2025-12-03
CVE-2025-20385 Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise CWE-79 2.4 Low 2025-12-03
CVE-2025-20382 URL validation bypass through Views Dashboard in Splunk Enterprise CWE-601 3.5 Low 2025-12-03
CVE-2025-20379 Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise CWE-200 3.5 Low 2025-11-12
CVE-2025-20378 Open Redirect on Web Login endpoint in Splunk Enterprise CWE-601 3.1 Low 2025-11-12
CVE-2025-20368 Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise CWE-79 5.7 Medium 2025-10-01
CVE-2025-20371 Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise CWE-918 7.5 High 2025-10-01
CVE-2025-20367 Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise CWE-79 5.7 Medium 2025-10-01
CVE-2025-20370 Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise CWE-400 4.9 Medium 2025-10-01
CVE-2025-20366 Improper Access Control in Background Job Submission in Splunk Enterprise CWE-284 6.5 Medium 2025-10-01
CVE-2025-20369 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise CWE-776 4.6 Medium 2025-10-01
CVE-2025-20322 Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise CWE-352 4.3 Medium 2025-07-07
CVE-2025-20323 Missing Access Control of Saved Searches in the Splunk Archiver app CWE-284 4.3 Medium 2025-07-07
CVE-2025-20321 Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise CWE-352 6.5 Medium 2025-07-07
CVE-2025-20325 Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise CWE-200 3.1 Low 2025-07-07
CVE-2025-20319 Remote Command Execution through Scripted Input Files in Splunk Enterprise CWE-78 6.8 Medium 2025-07-07
CVE-2025-20320 Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise CWE-35 6.3 Medium 2025-07-07
CVE-2025-20324 Improper Access Control in System Source Types Configuration in Splunk Enterprise CWE-284 5.4 Medium 2025-07-07
CVE-2025-20300 Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise CWE-863 4.3 Medium 2025-07-07
CVE-2025-20297 Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component CWE-79 4.3 Medium 2025-06-02
CVE-2025-20230 Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App CWE-284 4.3 Medium 2025-03-26
CVE-2025-20232 Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise CWE-200 5.7 Medium 2025-03-26
CVE-2025-20229 Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise CWE-284 8.0 High 2025-03-26
CVE-2025-20228 Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise CWE-352 6.5 Medium 2025-03-26
CVE-2025-20227 Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio CWE-20 4.3 Medium 2025-03-26
CVE-2025-20226 Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise CWE-200 5.7 Medium 2025-03-26
CVE-2025-20231 Sensitive Information Disclosure in Splunk Secure Gateway App CWE-532 7.1 High 2025-03-26

All 221 known CVE vulnerabilities affecting Splunk Enterprise with full Chinese analysis, references, and POCs where available.