{"items":[{"id":"CVE-2026-76531","published":"2026-10-21T22:52:20.059Z","updated":"2026-10-22T13:08:23.322Z","title":"Files or Directories Accessible to External Parties in Splunk SOAR","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2026-76530","published":"2026-10-21T22:52:19.125Z","updated":"2026-10-22T13:09:01.761Z","title":"Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2026-76529","published":"2026-10-21T22:52:18.217Z","updated":"2026-10-30T18:39:06.145Z","title":"Improper Protection of Alternate Path in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-76528","published":"2026-10-21T22:52:17.304Z","updated":"2026-11-02T21:07:56.931Z","title":"Protection Mechanism Failure in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-76527","published":"2026-10-21T22:52:16.405Z","updated":"2026-11-04T02:22:17.676Z","title":"Improper Check or Handling of Exceptional Conditions in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2026-76526","published":"2026-10-21T22:52:15.442Z","updated":"2026-10-26T15:38:20.704Z","title":"Improper Neutralization in Splunk SOAR","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2026-76408","published":"2026-10-21T22:52:14.362Z","updated":"2026-10-30T18:39:14.721Z","title":"Improper Control of a Resource Through its Lifetime in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-76407","published":"2026-10-21T22:52:13.446Z","updated":"2026-11-02T21:10:41.462Z","title":"Improper Access Control in Splunk SOAR","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2026-76406","published":"2026-10-21T22:52:12.496Z","updated":"2026-10-28T02:08:31.206Z","title":"Information Disclosure through REST API Authentication in Splunk SOAR","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-76308","published":"2026-10-21T22:52:11.575Z","updated":"2026-10-26T16:46:46.763Z","title":"Missing Authorization through the REST API in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-76307","published":"2026-10-21T22:52:10.654Z","updated":"2026-10-23T15:08:20.736Z","title":"Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2026-76306","published":"2026-10-21T22:52:09.741Z","updated":"2026-11-02T21:05:47.599Z","title":"Information Disclosure through REST API Query Filters in Splunk SOAR","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-76305","published":"2026-10-21T22:52:06.644Z","updated":"2026-10-28T02:06:39.485Z","title":"Improper Access Control during App Downloads in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2026-76304","published":"2026-10-21T22:52:05.722Z","updated":"2026-10-26T16:46:46.904Z","title":"Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-76303","published":"2026-10-21T22:52:04.809Z","updated":"2026-10-23T15:08:29.705Z","title":"Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-76302","published":"2026-10-21T22:52:03.886Z","updated":"2026-10-22T13:11:39.459Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2026-76301","published":"2026-10-21T22:52:02.970Z","updated":"2026-10-28T02:04:50.054Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-76300","published":"2026-10-21T22:52:02.038Z","updated":"2026-10-26T15:39:25.984Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2026-76299","published":"2026-10-21T22:52:01.149Z","updated":"2026-10-22T13:12:14.474Z","title":"Security Hardening in Splunk Enterprise - October 2026","severity":"CRITICAL","score":9.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2026-76298","published":"2026-10-21T22:52:00.185Z","updated":"2026-10-23T03:55:17.239Z","title":"Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-76297","published":"2026-10-21T22:51:59.246Z","updated":"2026-10-28T02:03:21.137Z","title":"Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00112,"kevAdded":null},{"id":"CVE-2026-76296","published":"2026-10-21T22:51:58.375Z","updated":"2026-10-26T16:46:47.044Z","title":"Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2026-76295","published":"2026-10-21T22:51:57.442Z","updated":"2026-10-22T13:37:47.972Z","title":"SPL Injection through the REST API in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2026-76294","published":"2026-10-21T22:51:56.520Z","updated":"2026-10-22T13:37:48.124Z","title":"Improper Access Control in Field Extraction Management in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2026-76293","published":"2026-10-21T22:51:55.643Z","updated":"2026-10-23T03:55:21.204Z","title":"Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-76292","published":"2026-10-21T22:51:54.732Z","updated":"2026-10-22T13:37:48.422Z","title":"Missing Authorization through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2026-76291","published":"2026-10-21T22:51:53.804Z","updated":"2026-10-23T10:57:45.799Z","title":"Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2026-76290","published":"2026-10-21T22:51:52.864Z","updated":"2026-10-22T13:37:48.564Z","title":"Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2026-76289","published":"2026-10-21T22:51:51.849Z","updated":"2026-10-22T13:37:48.707Z","title":"Denial of Service (DoS) through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-76288","published":"2026-10-21T22:51:50.487Z","updated":"2026-10-22T13:37:48.847Z","title":"Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2026-76287","published":"2026-10-21T22:51:49.096Z","updated":"2026-10-23T15:08:38.358Z","title":"Authorization Bypass in the Data Management REST API in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2026-76286","published":"2026-10-07T20:46:40.297Z","updated":"2026-10-08T18:00:27.987Z","title":"Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk MCP Server","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-76285","published":"2026-10-07T20:46:39.808Z","updated":"2026-10-16T19:28:37.523Z","title":"Improper Adherence to Coding Standards in Splunk Enterprise","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2026-76284","published":"2026-10-07T20:46:39.281Z","updated":"2026-10-16T17:55:32.276Z","title":"Improper Neutralization in Splunk Enterprise","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2026-76283","published":"2026-10-07T20:46:38.794Z","updated":"2026-10-16T17:55:31.267Z","title":"Protection Mechanism Failure in Splunk Enterprise","severity":"HIGH","score":7.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2026-76282","published":"2026-10-07T20:46:38.324Z","updated":"2026-10-16T17:55:30.573Z","title":"Improper Control of a Resource Through its Lifetime in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2026-76281","published":"2026-10-07T20:46:37.805Z","updated":"2026-10-27T20:08:36.638Z","title":"Improper Access Control in Splunk Enterprise","severity":"UNKNOWN","score":null,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-76280","published":"2026-10-07T20:46:37.327Z","updated":"2026-10-09T16:47:52.058Z","title":"Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2026-76279","published":"2026-10-07T20:46:36.840Z","updated":"2026-10-10T02:46:24.717Z","title":"Improper Input Validation of Index Names through the collect Command in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-76278","published":"2026-10-07T20:46:36.393Z","updated":"2026-10-08T13:31:03.418Z","title":"Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2026-76277","published":"2026-10-07T20:46:35.907Z","updated":"2026-10-08T15:06:09.743Z","title":"Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise","severity":"MEDIUM","score":4.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-76276","published":"2026-10-07T20:46:35.415Z","updated":"2026-10-08T18:00:58.238Z","title":"Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-76275","published":"2026-10-07T20:46:34.919Z","updated":"2026-10-09T16:47:58.196Z","title":"Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2026-76274","published":"2026-10-07T20:46:34.443Z","updated":"2026-10-10T02:45:33.583Z","title":"Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-76273","published":"2026-10-07T20:46:33.936Z","updated":"2026-10-08T13:35:47.065Z","title":"Improper Input Validation through the collect Command in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-76272","published":"2026-10-07T20:46:33.402Z","updated":"2026-10-08T15:07:56.769Z","title":"Missing Access Control through the REST API in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2026-76271","published":"2026-10-07T20:46:32.886Z","updated":"2026-10-08T18:01:28.447Z","title":"Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2026-76270","published":"2026-10-07T20:46:32.327Z","updated":"2026-10-09T16:48:07.015Z","title":"Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2026-76269","published":"2026-10-07T20:46:31.842Z","updated":"2026-10-10T02:45:00.166Z","title":"Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2026-76268","published":"2026-10-07T20:46:31.281Z","updated":"2026-10-21T22:52:20.998Z","title":"Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.04795,"kevAdded":null},{"id":"CVE-2026-76267","published":"2026-10-07T20:46:30.339Z","updated":"2026-10-08T15:09:43.445Z","title":"Log Injection through the REST API in Splunk App for Splunk O11y Cloud","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-76266","published":"2026-10-07T20:46:29.794Z","updated":"2026-10-09T03:55:28.884Z","title":"Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise","severity":"HIGH","score":7.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2026-76265","published":"2026-10-07T20:46:29.253Z","updated":"2026-10-09T16:48:13.063Z","title":"Improper Access Control through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2026-76264","published":"2026-10-07T20:46:28.292Z","updated":"2026-10-10T02:44:28.288Z","title":"Improper Authorization through the REST API in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-76405","published":"2026-08-19T21:35:18.074Z","updated":"2026-08-20T15:26:30.983Z","title":"Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk On-Call (VictorOps)","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76404","published":"2026-08-19T21:35:17.448Z","updated":"2026-08-20T15:26:31.137Z","title":"Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app","severity":"CRITICAL","score":9.1,"vendor":"Splunk","product":"Splunk MCP Server app","kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2026-76403","published":"2026-08-19T21:35:16.866Z","updated":"2026-08-20T15:26:31.304Z","title":"Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk Connect for Kafka","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-76402","published":"2026-08-19T21:35:16.276Z","updated":"2026-08-20T15:26:31.489Z","title":"Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka","severity":"HIGH","score":8.2,"vendor":"Splunk","product":"Splunk Connect for Kafka","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2026-76401","published":"2026-08-19T21:35:15.680Z","updated":"2026-08-20T15:26:31.717Z","title":"Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk Connect for Kafka","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2026-76400","published":"2026-08-19T21:35:15.092Z","updated":"2026-08-20T15:26:31.906Z","title":"Denial of Service (DoS) through the REST API in Splunk Connect for Kafka","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk Connect for Kafka","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2026-76399","published":"2026-08-19T21:35:14.514Z","updated":"2026-08-26T19:51:38.919Z","title":"Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2026-76398","published":"2026-08-19T21:35:13.913Z","updated":"2026-08-20T15:26:32.108Z","title":"Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-76397","published":"2026-08-19T21:35:13.301Z","updated":"2026-08-20T15:26:32.279Z","title":"Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2026-76396","published":"2026-08-19T21:35:12.735Z","updated":"2026-08-20T15:26:32.441Z","title":"Improper Access Control through Scheduled Searches in Splunk AI Toolkit","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2026-76395","published":"2026-08-19T21:35:12.154Z","updated":"2026-08-26T19:51:54.013Z","title":"Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00652,"kevAdded":null},{"id":"CVE-2026-76394","published":"2026-08-19T21:35:11.547Z","updated":"2026-08-26T19:37:27.919Z","title":"Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit","severity":"HIGH","score":8.3,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2026-76393","published":"2026-08-19T21:35:10.959Z","updated":"2026-08-26T19:36:08.435Z","title":"Race Condition during Model Upload through the REST API in Splunk AI Toolkit","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-76392","published":"2026-08-19T21:35:10.371Z","updated":"2026-08-26T19:35:04.238Z","title":"Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-76391","published":"2026-08-19T21:35:09.768Z","updated":"2026-08-26T15:20:41.779Z","title":"Improper Privilege Management through Agent Run History in Splunk AI Toolkit","severity":"HIGH","score":8.3,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2026-76390","published":"2026-08-19T21:35:09.175Z","updated":"2026-08-20T16:27:30.600Z","title":"Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Cisco Talos Intelligence for Enterprise Security Cloud","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2026-76389","published":"2026-08-19T21:35:08.579Z","updated":"2026-08-20T13:25:45.143Z","title":"Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Cisco Talos Intelligence for Enterprise Security Cloud","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2026-76388","published":"2026-08-19T21:35:07.968Z","updated":"2026-08-21T03:55:20.956Z","title":"Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise Security","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2026-76387","published":"2026-08-19T21:35:07.364Z","updated":"2026-08-21T03:55:19.756Z","title":"SPL Injection through the REST API in Splunk Enterprise Security","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise Security","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-76386","published":"2026-08-19T21:35:06.755Z","updated":"2026-08-20T15:26:32.588Z","title":"Information Disclosure through Action Parameters in Zoom app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Zoom app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76385","published":"2026-08-19T21:35:06.174Z","updated":"2026-08-20T16:27:30.760Z","title":"Information Disclosure through Action Parameters in Venafi app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Venafi app for Splunk SOAR","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-76384","published":"2026-08-19T21:35:05.565Z","updated":"2026-08-20T16:27:30.917Z","title":"Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Attack Analyzer Connector for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76383","published":"2026-08-19T21:35:04.965Z","updated":"2026-08-20T16:27:31.069Z","title":"Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"RSA SecurID Authentication Manager app for Splunk SOAR","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2026-76382","published":"2026-08-19T21:35:04.381Z","updated":"2026-08-20T16:27:31.224Z","title":"Information Disclosure through Action Parameters in Phantom app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Phantom app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76381","published":"2026-08-19T21:35:03.757Z","updated":"2026-08-20T16:27:31.379Z","title":"Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"MS Graph for Active Directory app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76380","published":"2026-08-19T21:35:03.162Z","updated":"2026-08-20T16:27:31.536Z","title":"Information Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"CrowdStrike OAuth API app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76379","published":"2026-08-19T21:35:02.584Z","updated":"2026-08-20T16:27:31.698Z","title":"Information Disclosure through Action Parameters in Cisco Webex app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Cisco Webex app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76378","published":"2026-08-19T21:35:01.904Z","updated":"2026-08-20T16:27:31.852Z","title":"Information Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Cisco Secure Malware Analytics app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76377","published":"2026-08-19T21:35:01.305Z","updated":"2026-08-20T16:27:32.007Z","title":"Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Azure AD Graph app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76376","published":"2026-08-19T21:35:00.701Z","updated":"2026-08-20T16:27:32.157Z","title":"Information Disclosure through Action Parameters in AWS IAM app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"AWS IAM app for Splunk SOAR","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-76375","published":"2026-08-19T21:35:00.081Z","updated":"2026-08-20T16:27:32.310Z","title":"Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR","severity":"MEDIUM","score":5,"vendor":"Splunk","product":"AD LDAP app for Splunk SOAR","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-76374","published":"2026-08-19T21:34:59.466Z","updated":"2026-08-20T16:27:32.464Z","title":"Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"AD LDAP app for Splunk SOAR","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-76373","published":"2026-08-19T21:34:58.845Z","updated":"2026-08-20T16:27:32.626Z","title":"Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"AD LDAP app for Splunk SOAR","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-76372","published":"2026-08-19T21:34:58.254Z","updated":"2026-08-20T16:27:32.776Z","title":"Incorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAR","severity":"MEDIUM","score":6.6,"vendor":"Splunk","product":"Nmap Scanner","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2026-76371","published":"2026-08-19T21:34:57.646Z","updated":"2026-08-20T16:27:32.930Z","title":"Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR","severity":"LOW","score":2.7,"vendor":"Splunk","product":"FireAMP","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2026-76370","published":"2026-08-19T21:34:57.039Z","updated":"2026-08-20T16:27:33.108Z","title":"Information Disclosure through the REST API in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-76369","published":"2026-08-19T21:34:56.420Z","updated":"2026-08-20T16:27:33.263Z","title":"Path Traversal through Automation Broker in Splunk SOAR","severity":"LOW","score":2.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-76368","published":"2026-08-19T21:34:55.824Z","updated":"2026-08-20T16:27:33.422Z","title":"Missing Authorization through Playbooks in Splunk SOAR","severity":"LOW","score":2.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2026-76367","published":"2026-08-19T21:34:55.224Z","updated":"2026-08-26T15:20:48.003Z","title":"Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR","severity":"MEDIUM","score":4,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-76366","published":"2026-08-19T21:34:54.654Z","updated":"2026-08-20T16:27:33.568Z","title":"Information Disclosure through the REST API in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2026-76365","published":"2026-08-19T21:34:54.077Z","updated":"2026-08-21T03:55:56.962Z","title":"Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-76364","published":"2026-08-19T21:34:53.480Z","updated":"2026-08-21T03:55:54.763Z","title":"Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-76363","published":"2026-08-19T21:34:52.901Z","updated":"2026-08-21T03:55:53.553Z","title":"Structured Query Language Injection through the REST API in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-76362","published":"2026-08-19T21:34:52.296Z","updated":"2026-08-21T03:56:04.383Z","title":"Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2026-76361","published":"2026-08-19T21:34:51.669Z","updated":"2026-08-20T16:27:34.354Z","title":"Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR","severity":"LOW","score":2.7,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2026-76360","published":"2026-08-19T21:34:51.070Z","updated":"2026-08-20T16:27:34.503Z","title":"Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-76359","published":"2026-08-19T21:34:50.450Z","updated":"2026-08-20T16:27:34.656Z","title":"Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00517,"kevAdded":null},{"id":"CVE-2026-76358","published":"2026-08-19T21:34:49.819Z","updated":"2026-08-20T16:27:34.807Z","title":"Path Traversal through App Installation Tar Extraction in Splunk SOAR","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00517,"kevAdded":null},{"id":"CVE-2026-76357","published":"2026-08-19T21:34:49.197Z","updated":"2026-08-20T16:27:34.967Z","title":"Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR","severity":"HIGH","score":7.6,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2026-76356","published":"2026-08-19T21:34:48.572Z","updated":"2026-08-27T16:24:58.958Z","title":"Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2026-76355","published":"2026-08-19T21:34:47.950Z","updated":"2026-08-26T15:20:53.488Z","title":"Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2026-76354","published":"2026-08-19T21:34:47.365Z","updated":"2026-08-20T16:27:35.131Z","title":"Path Traversal through Search Head Clustering in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2026-76353","published":"2026-08-19T21:34:46.696Z","updated":"2026-08-20T16:27:35.287Z","title":"Path Traversal through Knowledge Bundle Replication in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2026-76352","published":"2026-08-19T21:34:46.069Z","updated":"2026-08-21T03:56:08.865Z","title":"Improper Authorization through the REST API in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2026-76351","published":"2026-08-19T21:34:45.483Z","updated":"2026-08-21T03:56:18.924Z","title":"Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2026-76350","published":"2026-08-19T21:34:44.885Z","updated":"2026-08-21T03:56:20.072Z","title":"Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-76349","published":"2026-08-19T21:34:44.280Z","updated":"2026-08-20T16:27:35.904Z","title":"SPL Injection through Splunk Web Form Tokens in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-76348","published":"2026-08-19T21:34:43.675Z","updated":"2026-08-20T16:27:36.062Z","title":"Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise","severity":"LOW","score":3.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2026-76347","published":"2026-08-19T21:34:43.078Z","updated":"2026-08-20T16:27:36.214Z","title":"Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2026-76346","published":"2026-08-19T21:34:42.479Z","updated":"2026-08-20T16:27:36.363Z","title":"Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-76345","published":"2026-08-19T21:34:41.863Z","updated":"2026-08-20T16:27:36.514Z","title":"Remote Code Execution (RCE) through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2026-76344","published":"2026-08-19T21:34:41.251Z","updated":"2026-08-26T15:21:00.823Z","title":"Path Traversal through the Search Dispatch REST API in Splunk Enterprise","severity":"HIGH","score":7.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2026-76343","published":"2026-08-19T21:34:40.632Z","updated":"2026-08-26T15:21:10.540Z","title":"Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00379,"kevAdded":null},{"id":"CVE-2026-76342","published":"2026-08-19T21:34:40.021Z","updated":"2026-08-26T15:21:19.441Z","title":"Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2026-76341","published":"2026-08-19T21:34:39.437Z","updated":"2026-08-26T15:21:25.159Z","title":"Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2026-76340","published":"2026-08-19T21:34:38.821Z","updated":"2026-08-26T15:21:31.648Z","title":"Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-76339","published":"2026-08-19T21:34:38.214Z","updated":"2026-08-26T15:21:39.989Z","title":"SPL Injection through the geostats Command in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-76338","published":"2026-08-19T21:34:37.625Z","updated":"2026-08-27T16:24:58.778Z","title":"Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2026-76337","published":"2026-08-19T21:34:37.016Z","updated":"2026-08-26T15:21:49.476Z","title":"Path Traversal through Splunk Web Static File Serving in Splunk Enterprise","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2026-76336","published":"2026-08-19T21:34:36.419Z","updated":"2026-08-26T15:21:55.211Z","title":"Improper Access Control through the REST API in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-76335","published":"2026-08-19T21:34:35.810Z","updated":"2026-08-27T16:24:58.589Z","title":"Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2026-76334","published":"2026-08-19T21:34:35.225Z","updated":"2026-08-27T16:24:58.425Z","title":"SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-76333","published":"2026-08-19T21:34:34.638Z","updated":"2026-08-26T15:22:05.626Z","title":"Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-76332","published":"2026-08-19T21:34:34.043Z","updated":"2026-08-27T16:24:58.254Z","title":"SPL Injection through Splunk Web in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2026-76331","published":"2026-08-19T21:34:33.443Z","updated":"2026-08-27T16:24:58.088Z","title":"SPL Injection through the REST API in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-76330","published":"2026-08-19T21:34:32.855Z","updated":"2026-08-27T16:24:57.898Z","title":"SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2026-76329","published":"2026-08-19T21:34:32.243Z","updated":"2026-08-26T15:22:13.844Z","title":"SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-76328","published":"2026-08-19T21:34:31.631Z","updated":"2026-08-27T16:24:57.720Z","title":"SPL Injection through Splunk Web in Splunk Enterprise","severity":"MEDIUM","score":6.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2026-76327","published":"2026-08-19T21:34:31.028Z","updated":"2026-08-26T15:22:21.208Z","title":"SPL Injection through Splunk Web in Splunk Secure Gateway","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-76326","published":"2026-08-19T21:34:30.433Z","updated":"2026-08-26T15:22:29.114Z","title":"Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-76325","published":"2026-08-19T21:34:29.789Z","updated":"2026-08-26T15:22:35.153Z","title":"Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-76324","published":"2026-08-19T21:34:29.131Z","updated":"2026-08-26T15:22:40.616Z","title":"Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2026-76323","published":"2026-08-19T21:34:28.520Z","updated":"2026-08-27T16:24:57.552Z","title":"SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-76322","published":"2026-08-19T21:34:27.915Z","updated":"2026-08-27T16:24:57.395Z","title":"SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise","severity":"MEDIUM","score":6.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2026-76321","published":"2026-08-19T21:34:27.325Z","updated":"2026-08-27T16:24:57.240Z","title":"SPL Injection through Nearby Event Searches in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2026-76320","published":"2026-08-19T21:34:26.745Z","updated":"2026-08-26T15:22:47.119Z","title":"SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise","severity":"MEDIUM","score":5.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-76319","published":"2026-08-19T21:34:26.155Z","updated":"2026-08-27T16:24:57.079Z","title":"Remote Code Execution (RCE) through Federated Search in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2026-76318","published":"2026-08-19T21:34:25.554Z","updated":"2026-08-26T15:22:57.214Z","title":"Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-76317","published":"2026-08-19T21:34:24.963Z","updated":"2026-08-27T16:24:56.910Z","title":"Path Traversal through the Lookup Configuration REST API in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0056,"kevAdded":null},{"id":"CVE-2026-76316","published":"2026-08-19T21:34:24.389Z","updated":"2026-08-27T16:24:56.752Z","title":"Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2026-76315","published":"2026-08-19T21:34:23.787Z","updated":"2026-08-27T16:24:56.592Z","title":"Code Injection through Splunk Web Manager Configuration in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00653,"kevAdded":null},{"id":"CVE-2026-76314","published":"2026-08-19T21:34:23.194Z","updated":"2026-08-27T16:24:56.442Z","title":"Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2026-76313","published":"2026-08-19T21:34:22.588Z","updated":"2026-08-27T16:24:56.290Z","title":"Remote Code Execution (RCE) through the REST API in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2026-76312","published":"2026-08-19T21:34:21.998Z","updated":"2026-08-27T16:24:56.123Z","title":"Improper Access Control through Embedded Reports in Splunk Enterprise","severity":"CRITICAL","score":9.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-76311","published":"2026-08-19T21:34:21.414Z","updated":"2026-08-27T16:24:55.952Z","title":"Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise","severity":"CRITICAL","score":9.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-76310","published":"2026-08-19T21:34:20.829Z","updated":"2026-08-27T16:24:55.797Z","title":"Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise","severity":"CRITICAL","score":9.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-76309","published":"2026-08-19T21:34:20.209Z","updated":"2026-08-26T15:23:04.652Z","title":"Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2026-76263","published":"2026-08-19T21:34:19.607Z","updated":"2026-08-26T19:57:07.544Z","title":"Improper Access Control through the REST API in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2026-76262","published":"2026-08-19T21:34:19.005Z","updated":"2026-08-26T19:52:23.867Z","title":"Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2026-76261","published":"2026-08-19T21:34:18.416Z","updated":"2026-08-26T19:52:39.938Z","title":"Insecure Default Access Control List through the REST API in Splunk Secure Gateway","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2026-76260","published":"2026-08-19T21:34:17.817Z","updated":"2026-08-26T15:23:11.301Z","title":"Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-76259","published":"2026-08-19T21:34:17.199Z","updated":"2026-08-27T16:24:55.649Z","title":"Improper Privilege Management on the Management Port in Splunk Enterprise for Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2026-76258","published":"2026-08-19T21:34:16.596Z","updated":"2026-08-26T15:23:19.681Z","title":"Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-76257","published":"2026-08-19T21:34:15.984Z","updated":"2026-08-26T15:23:27.620Z","title":"Missing Authorization through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-76256","published":"2026-08-19T21:34:15.368Z","updated":"2026-08-26T15:23:35.816Z","title":"Information Exposure through REST API Endpoints in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2026-76255","published":"2026-08-19T21:34:14.772Z","updated":"2026-08-27T16:24:55.493Z","title":"Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2026-76254","published":"2026-08-19T21:34:14.171Z","updated":"2026-08-27T16:24:55.017Z","title":"SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-76253","published":"2026-08-19T21:34:13.529Z","updated":"2026-08-27T16:24:54.855Z","title":"Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2026-76252","published":"2026-08-19T21:34:12.932Z","updated":"2026-08-26T15:23:42.214Z","title":"Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-76251","published":"2026-08-19T21:34:12.364Z","updated":"2026-08-26T15:23:52.622Z","title":"Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2026-20298","published":"2026-07-15T17:18:32.070Z","updated":"2026-07-16T03:55:51.583Z","title":"Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2026-20296","published":"2026-07-15T17:18:23.696Z","updated":"2026-07-16T03:55:54.695Z","title":"SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise","severity":"HIGH","score":8.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-20297","published":"2026-07-15T17:18:13.390Z","updated":"2026-07-16T03:55:53.915Z","title":"Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2026-20266","published":"2026-06-17T17:07:24.598Z","updated":"2026-06-17T18:04:08.968Z","title":"OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit","severity":"CRITICAL","score":9.1,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2026-20265","published":"2026-06-17T17:07:19.943Z","updated":"2026-06-17T18:04:30.312Z","title":"Insecure Default Domain Allowlist in Splunk AI Toolkit","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-20258","published":"2026-06-10T17:16:23.870Z","updated":"2026-06-10T18:22:27.505Z","title":"Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-20253","published":"2026-06-10T17:16:21.242Z","updated":"2026-06-19T03:55:19.206Z","title":"Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise","severity":"CRITICAL","score":9.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":true,"epss":0.96939,"kevAdded":"2026-06-18"},{"id":"CVE-2026-20260","published":"2026-06-10T17:16:20.653Z","updated":"2026-06-10T18:23:13.215Z","title":"Log Injection through HTTP Request Paths in Splunk SOAR","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk SOAR","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-20252","published":"2026-06-10T17:16:19.518Z","updated":"2026-06-10T18:23:36.803Z","title":"Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise","severity":"HIGH","score":7.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2026-20257","published":"2026-06-10T17:16:03.885Z","updated":"2026-06-10T18:24:02.482Z","title":"Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-20259","published":"2026-06-10T17:16:02.256Z","updated":"2026-06-10T18:24:37.870Z","title":"Improper Access Control in Splunk Enterprise","severity":"MEDIUM","score":5.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2026-20255","published":"2026-06-10T17:16:00.962Z","updated":"2026-06-10T18:25:12.492Z","title":"Improper Input Validation through Classic Dashboards in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2026-20251","published":"2026-06-10T17:16:00.352Z","updated":"2026-06-11T03:55:39.372Z","title":"Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.32215,"kevAdded":null},{"id":"CVE-2026-20254","published":"2026-06-10T17:15:59.452Z","updated":"2026-06-10T18:27:01.123Z","title":"Information Disclosure through External Content Restriction Bypass in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-20256","published":"2026-06-10T17:15:55.966Z","updated":"2026-06-10T18:19:26.044Z","title":"Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-20238","published":"2026-05-20T16:32:19.740Z","updated":"2026-05-20T17:48:46.704Z","title":"Improper Access Control through Role Inheritance in Splunk AI Toolkit app","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk AI Toolkit","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2026-20239","published":"2026-05-20T16:32:12.678Z","updated":"2026-05-21T03:55:38.324Z","title":"Sensitive Information Disclosure through Log Files in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00485,"kevAdded":null},{"id":"CVE-2026-20240","published":"2026-05-20T16:32:05.687Z","updated":"2026-05-20T17:47:46.372Z","title":"Denial of Service through coldToFrozen.sh Script in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-20205","published":"2026-04-15T15:17:58.202Z","updated":"2026-04-15T17:39:19.517Z","title":"Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk MCP Server","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2026-20203","published":"2026-04-15T15:17:56.261Z","updated":"2026-04-15T17:40:36.484Z","title":"Improper Access Control in Data Model Acceleration in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2026-20204","published":"2026-04-15T15:17:54.019Z","updated":"2026-04-16T03:55:29.794Z","title":"Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.03098,"kevAdded":null},{"id":"CVE-2026-20202","published":"2026-04-15T15:17:43.871Z","updated":"2026-04-16T03:55:28.582Z","title":"Improper Input Validation during User Account Creation in Splunk Enterprise","severity":"MEDIUM","score":6.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2026-20163","published":"2026-03-11T16:18:26.857Z","updated":"2026-03-12T13:23:31.857Z","title":"Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2026-20162","published":"2026-03-11T16:18:22.880Z","updated":"2026-03-12T16:19:25.151Z","title":"Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2026-20166","published":"2026-03-11T16:18:17.121Z","updated":"2026-03-12T16:19:30.880Z","title":"Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2026-20164","published":"2026-03-11T16:18:01.915Z","updated":"2026-03-12T16:19:36.648Z","title":"Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-20165","published":"2026-03-11T16:17:54.427Z","updated":"2026-03-12T16:19:44.284Z","title":"Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-20142","published":"2026-02-18T16:45:37.455Z","updated":"2026-02-26T14:44:16.319Z","title":"Sensitive Information Disclosure in \"_internal\" index in Splunk Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-20138","published":"2026-02-18T16:45:33.870Z","updated":"2026-02-26T14:44:16.462Z","title":"Sensitive Information Disclosure in \"_internal\" index in Splunk Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-20139","published":"2026-02-18T16:45:32.308Z","updated":"2026-02-19T19:28:04.863Z","title":"Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.05677,"kevAdded":null},{"id":"CVE-2026-20144","published":"2026-02-18T16:45:23.674Z","updated":"2026-02-26T14:44:16.610Z","title":"Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-20141","published":"2026-02-18T16:45:21.436Z","updated":"2026-02-18T17:56:35.360Z","title":"Improper Access Control in Splunk Monitoring Console App","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-20137","published":"2026-02-18T16:45:17.606Z","updated":"2026-02-18T17:55:22.684Z","title":"Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise","severity":"LOW","score":3.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2025-20388","published":"2025-12-03T17:00:59.450Z","updated":"2025-12-03T18:14:46.236Z","title":"Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise","severity":"LOW","score":2.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2025-20389","published":"2025-12-03T17:00:55.364Z","updated":"2025-12-03T21:37:01.207Z","title":"Improper Input Validation in \"label\" column field in Splunk Secure Gateway App","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2025-20387","published":"2025-12-03T17:00:51.451Z","updated":"2026-02-26T16:57:35.211Z","title":"Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2025-20383","published":"2025-12-03T17:00:36.414Z","updated":"2025-12-03T21:33:17.908Z","title":"Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2025-20384","published":"2025-12-03T17:00:34.212Z","updated":"2025-12-03T21:32:24.714Z","title":"Unauthenticated Log Injection in Splunk Enterprise","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2025-20386","published":"2025-12-03T17:00:31.753Z","updated":"2026-02-26T16:57:35.731Z","title":"Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2025-20385","published":"2025-12-03T17:00:29.826Z","updated":"2025-12-03T21:30:42.532Z","title":"Stored Cross-Site scripting (XSS) through Anchor Tag \"href\" in Navigation Bar Collections in Splunk Enterprise","severity":"LOW","score":2.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2025-20381","published":"2025-12-03T17:00:25.945Z","updated":"2025-12-03T21:29:51.839Z","title":"SPL commands allowlist controls bypass in Splunk MCP Server app through \"run_splunk_query\" MCP tool","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk MCP Server","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2025-20382","published":"2025-12-03T17:00:21.824Z","updated":"2025-12-03T21:28:38.682Z","title":"URL validation bypass through Views Dashboard in Splunk Enterprise","severity":"LOW","score":3.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2025-20373","published":"2025-11-26T17:59:06.210Z","updated":"2025-11-26T18:28:46.500Z","title":"Sensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks","severity":"LOW","score":2.7,"vendor":"Splunk","product":"Splunk Add-on for Palo Alto Networks","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2025-20379","published":"2025-11-12T17:23:00.819Z","updated":"2025-11-12T21:04:40.810Z","title":"Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise","severity":"LOW","score":3.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2025-20378","published":"2025-11-12T17:22:56.630Z","updated":"2025-11-12T21:04:48.103Z","title":"Open Redirect on Web Login endpoint in Splunk Enterprise","severity":"LOW","score":3.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2025-20368","published":"2025-10-01T16:08:04.403Z","updated":"2025-10-01T17:35:52.651Z","title":"Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2025-20371","published":"2025-10-01T16:08:02.891Z","updated":"2026-02-26T17:48:25.482Z","title":"Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2025-20367","published":"2025-10-01T16:08:01.304Z","updated":"2025-10-01T17:40:43.251Z","title":"Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2025-20370","published":"2025-10-01T16:07:57.541Z","updated":"2025-10-01T17:36:09.560Z","title":"Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2025-20366","published":"2025-10-01T16:07:56.027Z","updated":"2025-10-01T17:47:24.781Z","title":"Improper Access Control in Background Job Submission in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2025-20369","published":"2025-10-01T16:07:52.488Z","updated":"2025-10-01T17:36:17.809Z","title":"Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise","severity":"MEDIUM","score":4.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2025-20322","published":"2025-07-07T17:48:05.482Z","updated":"2025-07-07T18:04:40.952Z","title":"Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2025-20323","published":"2025-07-07T17:48:03.961Z","updated":"2025-07-07T18:05:58.100Z","title":"Missing Access Control of Saved Searches in the Splunk Archiver app","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2025-20321","published":"2025-07-07T17:48:03.146Z","updated":"2025-07-07T18:07:50.729Z","title":"Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2025-20325","published":"2025-07-07T17:48:02.265Z","updated":"2025-07-08T13:31:51.735Z","title":"Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise","severity":"LOW","score":3.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2025-20319","published":"2025-07-07T17:48:01.283Z","updated":"2026-02-26T18:27:54.075Z","title":"Remote Command Execution through Scripted Input Files in Splunk Enterprise","severity":"MEDIUM","score":6.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2025-20324","published":"2025-07-07T17:48:00.484Z","updated":"2025-07-08T13:36:57.794Z","title":"Improper Access Control in System Source Types Configuration in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2025-20320","published":"2025-07-07T17:47:59.569Z","updated":"2025-07-08T13:37:17.043Z","title":"Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2025-20300","published":"2025-07-07T17:47:58.250Z","updated":"2025-07-08T13:37:50.544Z","title":"Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2025-20298","published":"2025-06-02T17:14:03.786Z","updated":"2025-06-02T17:24:12.974Z","title":"Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk/UniversalForwarder for Windows","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2025-20297","published":"2025-06-02T17:14:02.301Z","updated":"2025-06-02T17:25:38.664Z","title":"Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.31167,"kevAdded":null},{"id":"CVE-2025-20230","published":"2025-03-26T22:24:15.510Z","updated":"2025-03-27T13:48:35.678Z","title":"Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2025-20233","published":"2025-03-26T22:06:39.987Z","updated":"2025-03-27T13:49:03.631Z","title":"Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing","severity":"LOW","score":2.5,"vendor":"Splunk","product":"Splunk App for Lookup File Editing","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2025-20232","published":"2025-03-26T22:06:00.180Z","updated":"2025-03-27T13:49:49.830Z","title":"Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2025-20229","published":"2025-03-26T22:05:09.352Z","updated":"2026-02-26T19:09:09.560Z","title":"Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.16021,"kevAdded":null},{"id":"CVE-2025-20228","published":"2025-03-26T22:04:31.566Z","updated":"2025-03-27T13:42:27.944Z","title":"Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2025-20227","published":"2025-03-26T22:03:50.424Z","updated":"2025-03-27T13:50:15.585Z","title":"Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2025-20226","published":"2025-03-26T22:02:10.530Z","updated":"2025-03-27T13:50:54.966Z","title":"Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2025-20231","published":"2025-03-26T21:45:41.250Z","updated":"2026-02-26T19:09:10.032Z","title":"Sensitive Information Disclosure in Splunk Secure Gateway App","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2025-0367","published":"2025-01-30T17:04:49.734Z","updated":"2025-02-12T19:51:11.515Z","title":"Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Supporting Add-on for Active Directory","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2025-22621","published":"2025-01-07T16:48:32.866Z","updated":"2025-02-28T11:03:57.914Z","title":"Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk App for SOAR","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2024-53244","published":"2024-12-10T18:01:24.534Z","updated":"2025-02-28T11:03:44.167Z","title":"Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2024-53246","published":"2024-12-10T18:01:16.803Z","updated":"2025-02-28T11:03:55.865Z","title":"Sensitive Information Disclosure through SPL commands","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2024-53243","published":"2024-12-10T18:00:49.236Z","updated":"2025-02-28T11:03:42.526Z","title":"Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2024-53245","published":"2024-12-10T18:00:33.254Z","updated":"2025-02-28T11:03:55.614Z","title":"Information Disclosure due to Username Collision with a Role that has the same Name as the User","severity":"LOW","score":3.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2024-53247","published":"2024-12-10T18:00:24.359Z","updated":"2025-02-28T11:03:41.947Z","title":"Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01077,"kevAdded":null},{"id":"CVE-2024-45739","published":"2024-10-14T17:03:38.949Z","updated":"2025-02-28T11:03:52.768Z","title":"Sensitive information disclosure in AdminManager logging channel","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2024-45738","published":"2024-10-14T17:03:38.142Z","updated":"2025-02-28T11:03:47.990Z","title":"Sensitive information disclosure in REST_Calls logging channel","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2024-45737","published":"2024-10-14T17:03:37.328Z","updated":"2025-02-28T11:03:53.256Z","title":"Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2024-45733","published":"2024-10-14T17:03:36.497Z","updated":"2025-02-28T11:03:46.564Z","title":"Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01093,"kevAdded":null},{"id":"CVE-2024-45732","published":"2024-10-14T17:03:35.668Z","updated":"2025-02-28T11:03:50.807Z","title":"Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2024-45736","published":"2024-10-14T17:03:34.828Z","updated":"2025-02-28T11:03:54.861Z","title":"Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2024-45741","published":"2024-10-14T17:03:33.986Z","updated":"2025-02-28T11:04:00.392Z","title":"Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.14798,"kevAdded":null},{"id":"CVE-2024-45734","published":"2024-10-14T17:03:30.412Z","updated":"2025-02-28T11:03:43.384Z","title":"Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2024-45740","published":"2024-10-14T17:03:29.360Z","updated":"2025-02-28T11:03:58.462Z","title":"Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2024-45731","published":"2024-10-14T16:46:01.751Z","updated":"2025-02-28T11:03:47.249Z","title":"Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2024-45735","published":"2024-10-14T16:45:54.667Z","updated":"2025-02-28T11:03:52.049Z","title":"Improper Access Control for low-privileged user in Splunk Secure Gateway App","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2024-36997","published":"2024-07-01T16:57:47.904Z","updated":"2025-02-28T11:03:50.355Z","title":"Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint","severity":"MEDIUM","score":4.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2024-36993","published":"2024-07-01T16:54:35.379Z","updated":"2025-02-28T11:03:40.785Z","title":"Persistent Cross-site Scripting (XSS) in Web Bulletin","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2024-36995","published":"2024-07-01T16:52:57.700Z","updated":"2025-02-28T11:03:55.127Z","title":"Low-privileged user could create experimental items","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2024-36982","published":"2024-07-01T16:31:04.078Z","updated":"2025-02-28T11:03:48.458Z","title":"Denial of Service through null pointer reference in “cluster/config” REST endpoint","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2024-36991","published":"2024-07-01T16:31:03.563Z","updated":"2025-02-28T11:03:48.685Z","title":"Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.13006,"kevAdded":null},{"id":"CVE-2024-36990","published":"2024-07-01T16:30:57.995Z","updated":"2025-02-28T11:03:44.950Z","title":"Denial of Service (DoS) on the datamodel/web REST endpoint","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00687,"kevAdded":null},{"id":"CVE-2024-36985","published":"2024-07-01T16:30:57.461Z","updated":"2025-02-28T11:03:58.932Z","title":"Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.06464,"kevAdded":null},{"id":"CVE-2024-36992","published":"2024-07-01T16:30:51.507Z","updated":"2025-02-28T11:03:53.510Z","title":"Persistent Cross-site Scripting (XSS) in Dashboard Elements","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2024-36984","published":"2024-07-01T16:30:44.270Z","updated":"2026-11-03T23:59:36.237Z","title":"Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01412,"kevAdded":null},{"id":"CVE-2024-36986","published":"2024-07-01T16:30:42.325Z","updated":"2025-02-28T11:03:54.414Z","title":"Risky command safeguards bypass through Search ID query in Analytics Workspace","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2024-36983","published":"2024-07-01T16:30:41.779Z","updated":"2025-02-28T11:03:59.649Z","title":"Command Injection using External Lookups","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00996,"kevAdded":null},{"id":"CVE-2024-36996","published":"2024-07-01T16:30:41.186Z","updated":"2025-02-28T11:03:41.084Z","title":"Information Disclosure of user names","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2024-36994","published":"2024-07-01T16:30:40.653Z","updated":"2025-02-28T11:03:49.669Z","title":"Persistent Cross-site Scripting (XSS) in Dashboard Elements","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2024-36989","published":"2024-07-01T16:30:38.545Z","updated":"2025-02-28T11:03:53.004Z","title":"Low-privileged user could create notifications in Splunk Web Bulletin Messages","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2024-36987","published":"2024-07-01T16:30:36.235Z","updated":"2025-02-28T11:03:46.111Z","title":"Insecure File Upload in the indexing/preview REST endpoint","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2024-29945","published":"2024-03-27T16:16:00.974Z","updated":"2025-12-16T18:13:23.577Z","title":"Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0095,"kevAdded":null},{"id":"CVE-2024-29946","published":"2024-03-27T16:15:59.872Z","updated":"2025-02-28T11:03:53.749Z","title":"Risky command safeguards bypass in Dashboard Examples Hub","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2023-46230","published":"2024-01-30T17:00:49.161Z","updated":"2025-05-30T18:47:36.661Z","title":"Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder","severity":"HIGH","score":8.2,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2023-46231","published":"2024-01-30T17:00:46.832Z","updated":"2025-02-28T11:03:46.800Z","title":"Session Token Disclosure to Internal Log Files in Splunk Add-on Builder","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2024-23678","published":"2024-01-22T20:37:43.095Z","updated":"2025-06-17T21:19:26.089Z","title":"Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2024-23676","published":"2024-01-22T20:37:42.546Z","updated":"2025-06-17T14:24:05.909Z","title":"Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command","severity":"MEDIUM","score":4.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2024-23677","published":"2024-01-22T20:37:41.993Z","updated":"2025-02-28T11:03:55.344Z","title":"Server Response Disclosure in RapidDiag Salesforce.com Log File","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2024-23675","published":"2024-01-22T20:37:23.117Z","updated":"2025-02-28T11:03:59.164Z","title":"Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2024-22164","published":"2024-01-09T17:01:07.832Z","updated":"2025-06-03T14:31:04.696Z","title":"Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise Security (ES)","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2024-22165","published":"2024-01-09T17:01:04.884Z","updated":"2025-02-28T11:03:43.686Z","title":"Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise Security (ES)","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2023-46213","published":"2023-11-16T20:15:46.739Z","updated":"2025-02-28T11:03:42.823Z","title":"Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2023-46214","published":"2023-11-16T20:15:25.838Z","updated":"2025-12-16T18:23:23.962Z","title":"Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.89174,"kevAdded":null},{"id":"CVE-2023-40597","published":"2023-08-30T16:19:44.220Z","updated":"2025-07-01T13:45:24.210Z","title":"Absolute Path Traversal in Splunk Enterprise Using runshellscript.py","severity":"HIGH","score":7.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2023-40596","published":"2023-08-30T16:19:43.630Z","updated":"2025-02-28T11:03:54.197Z","title":"Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL","severity":"HIGH","score":7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2023-40593","published":"2023-08-30T16:19:41.308Z","updated":"2025-02-28T11:03:56.605Z","title":"Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2023-40594","published":"2023-08-30T16:19:40.677Z","updated":"2025-02-28T11:03:47.517Z","title":"Denial of Service (DoS) via the ‘printf’ Search Function","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2023-4571","published":"2023-08-30T16:19:39.150Z","updated":"2025-02-28T11:03:56.113Z","title":"Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk ITSI","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2023-40592","published":"2023-08-30T16:19:38.525Z","updated":"2025-02-28T11:03:48.911Z","title":"Reflected Cross-site Scripting (XSS) on \"/app/search/table\" web endpoint","severity":"HIGH","score":8.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2023-40595","published":"2023-08-30T16:19:29.761Z","updated":"2025-02-28T11:03:49.175Z","title":"Remote Code Execution via Serialized Session Payload","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00901,"kevAdded":null},{"id":"CVE-2023-40598","published":"2023-08-30T16:19:28.135Z","updated":"2025-02-28T11:03:41.623Z","title":"Command Injection in Splunk Enterprise Using External Lookups","severity":"HIGH","score":8.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00852,"kevAdded":null},{"id":"CVE-2023-3997","published":"2023-07-31T16:16:19.911Z","updated":"2025-02-28T11:03:50.122Z","title":"Unauthenticated Log Injection In Splunk SOAR","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk SOAR (On-premises)","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2023-32709","published":"2023-06-01T16:34:30.933Z","updated":"2025-02-28T11:03:52.521Z","title":"Low-privileged User can View Hashed Default Splunk Password","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2023-32707","published":"2023-06-01T16:34:30.607Z","updated":"2025-03-11T15:02:44.575Z","title":"‘edit_user’ Capability Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.78658,"kevAdded":null},{"id":"CVE-2023-32713","published":"2023-06-01T16:34:30.265Z","updated":"2025-02-28T11:03:54.632Z","title":"Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream","severity":"HIGH","score":7.8,"vendor":"Splunk","product":"Splunk App for Stream","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2023-32712","published":"2023-06-01T16:34:29.862Z","updated":"2025-02-28T11:03:57.287Z","title":"Unauthenticated Log Injection in Splunk Enterprise","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2023-32714","published":"2023-06-01T16:34:29.504Z","updated":"2025-02-28T11:03:42.218Z","title":"Path Traversal in Splunk App for Lookup File Editing","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk App for Lookup File Editing","kev":false,"epss":0.42824,"kevAdded":null},{"id":"CVE-2023-32716","published":"2023-06-01T16:34:29.168Z","updated":"2025-02-28T11:03:45.371Z","title":"Denial of Service via the 'dump' SPL command","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2023-32710","published":"2023-06-01T16:34:28.796Z","updated":"2025-02-28T11:03:51.327Z","title":"Information Disclosure via the ‘copyresults’ SPL Command","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-32717","published":"2023-06-01T16:34:28.464Z","updated":"2025-02-28T11:03:51.073Z","title":"Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2023-32706","published":"2023-06-01T16:34:28.142Z","updated":"2025-02-28T11:03:44.652Z","title":"Denial Of Service due to Untrusted XML Tag in XML Parser within  SAML Authentication","severity":"HIGH","score":7.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00602,"kevAdded":null},{"id":"CVE-2023-32715","published":"2023-06-01T16:34:27.816Z","updated":"2025-02-28T11:03:57.054Z","title":"Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing","severity":"MEDIUM","score":4.7,"vendor":"Splunk","product":"Splunk App for Lookup File Editing","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2023-32711","published":"2023-06-01T16:34:27.478Z","updated":"2025-02-28T11:03:51.579Z","title":"Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2023-32708","published":"2023-06-01T16:34:27.126Z","updated":"2025-02-28T11:03:58.212Z","title":"HTTP Response Splitting via the ‘rest’ SPL Command","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2023-22939","published":"2023-02-14T17:24:47.539Z","updated":"2025-02-28T11:03:47.779Z","title":"SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2023-22938","published":"2023-02-14T17:24:46.893Z","updated":"2025-03-19T18:53:03.165Z","title":"Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2023-22937","published":"2023-02-14T17:24:45.588Z","updated":"2025-02-28T11:03:41.352Z","title":"Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-22943","published":"2023-02-14T17:22:40.690Z","updated":"2025-02-28T11:03:49.432Z","title":"Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2023-22933","published":"2023-02-14T17:22:40.081Z","updated":"2025-02-28T11:03:44.416Z","title":"Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2023-22942","published":"2023-02-14T17:22:39.330Z","updated":"2025-02-28T11:03:45.664Z","title":"Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2023-22932","published":"2023-02-14T17:22:38.739Z","updated":"2025-02-28T11:03:57.639Z","title":"Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2023-22936","published":"2023-02-14T17:22:38.050Z","updated":"2025-02-28T11:03:49.899Z","title":"Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2023-22941","published":"2023-02-14T17:22:37.444Z","updated":"2025-02-28T11:03:59.397Z","title":"Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01028,"kevAdded":null},{"id":"CVE-2023-22931","published":"2023-02-14T17:22:36.712Z","updated":"2025-02-28T11:03:46.340Z","title":"‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2023-22935","published":"2023-02-14T17:22:36.093Z","updated":"2025-03-20T13:55:35.952Z","title":"SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2023-22934","published":"2023-02-14T17:22:35.427Z","updated":"2025-02-28T11:03:58.707Z","title":"SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01121,"kevAdded":null},{"id":"CVE-2023-22940","published":"2023-02-14T17:22:34.688Z","updated":"2025-02-28T11:03:47.020Z","title":"SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2022-43572","published":"2022-11-04T22:23:39.383Z","updated":"2025-05-01T19:57:01.357Z","title":"Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00998,"kevAdded":null},{"id":"CVE-2022-43570","published":"2022-11-04T22:22:50.526Z","updated":"2025-05-05T20:30:12.036Z","title":"XML External Entity Injection through a custom View in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00792,"kevAdded":null},{"id":"CVE-2022-43569","published":"2022-11-04T22:22:31.895Z","updated":"2025-04-30T20:02:18.090Z","title":"Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00917,"kevAdded":null},{"id":"CVE-2022-43568","published":"2022-11-04T22:22:13.266Z","updated":"2025-05-01T19:39:17.951Z","title":"Reflected Cross-Site Scripting via the radio template in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.42801,"kevAdded":null},{"id":"CVE-2022-43567","published":"2022-11-04T22:21:50.819Z","updated":"2025-05-05T20:34:05.121Z","title":"Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01563,"kevAdded":null},{"id":"CVE-2022-43566","published":"2022-11-04T22:21:21.337Z","updated":"2025-05-05T20:34:58.924Z","title":"Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01027,"kevAdded":null},{"id":"CVE-2022-43565","published":"2022-11-04T22:20:55.783Z","updated":"2025-05-05T20:35:48.097Z","title":"Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00793,"kevAdded":null},{"id":"CVE-2022-43564","published":"2022-11-04T22:20:36.543Z","updated":"2025-05-01T20:22:37.435Z","title":"Denial of Service in Splunk Enterprise through search macros","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2022-43563","published":"2022-11-04T22:19:55.669Z","updated":"2025-05-05T20:36:39.876Z","title":"Risky command safeguards bypass via rex search command field names in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00793,"kevAdded":null},{"id":"CVE-2022-43562","published":"2022-11-04T22:19:11.815Z","updated":"2025-05-05T20:37:25.294Z","title":"Host Header Injection in Splunk Enterprise","severity":"LOW","score":3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2022-43571","published":"2022-11-03T22:56:44.862Z","updated":"2025-05-02T18:24:40.047Z","title":"Remote Code Execution through dashboard PDF generation component in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.18604,"kevAdded":null},{"id":"CVE-2022-43561","published":"2022-11-03T22:06:41.735Z","updated":"2025-04-25T19:10:23.182Z","title":"Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2022-37437","published":"2022-08-16T19:50:29.832Z","updated":"2024-09-16T20:03:48.193Z","title":"Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2022-37439","published":"2022-08-16T19:49:49.787Z","updated":"2024-09-16T22:56:21.322Z","title":"Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input","severity":"MEDIUM","score":5.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2022-37438","published":"2022-08-16T19:49:23.763Z","updated":"2024-09-17T01:46:12.412Z","title":"Information disclosure via the dashboard drilldown in Splunk Enterprise","severity":"LOW","score":2.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2022-32152","published":"2022-06-15T16:46:29.133Z","updated":"2024-09-17T02:02:11.058Z","title":"Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00973,"kevAdded":null},{"id":"CVE-2022-32156","published":"2022-06-14T00:00:00.000Z","updated":"2026-11-02T22:10:03.157Z","title":"Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2022-27183","published":"2022-05-06T16:38:41.000Z","updated":"2024-08-03T05:25:31.044Z","title":"Reflected XSS in a query parameter of the Monitoring Console","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2022-26889","published":"2022-05-06T16:37:56.000Z","updated":"2024-08-03T05:18:38.088Z","title":"Path Traversal in search parameter results in external content injection","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01501,"kevAdded":null},{"id":"CVE-2022-26070","published":"2022-05-06T16:37:16.000Z","updated":"2024-08-03T04:56:37.596Z","title":"Error message discloses internal path","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2021-42743","published":"2022-05-06T16:36:35.000Z","updated":"2024-08-04T03:38:50.215Z","title":"Local privilege escalation via a default path in Splunk Enterprise Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2021-33845","published":"2022-05-06T16:35:58.000Z","updated":"2024-08-04T00:05:51.041Z","title":"Username enumeration through lockout message in REST API","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00901,"kevAdded":null},{"id":"CVE-2021-31559","published":"2022-05-06T16:35:19.000Z","updated":"2024-08-03T23:03:33.306Z","title":"S2S TcpToken authentication bypass","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00892,"kevAdded":null},{"id":"CVE-2021-26253","published":"2022-05-06T16:34:33.000Z","updated":"2024-08-03T20:19:20.123Z","title":"Bypass of Splunk Enterprise's implementation of DUO MFA","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00816,"kevAdded":null},{"id":"CVE-2021-3422","published":"2022-03-25T18:02:43.000Z","updated":"2024-08-03T16:53:17.577Z","title":"Indexer denial-of-service via malformed S2S request","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00601,"kevAdded":null}]}