ES
Product
Enterprise Security
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Enterprise Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36984 | 8.8 | Jul 1 | Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows Affected: 9.0 before 9.0.10; 9.1 before 9.1.5; 9.2 before 9.2.2 |
| CVE-2026-76388 | 8.1 | Aug 19 | Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security Affected: before 8.6.1 |
| CVE-2026-76387 | 8.1 | Aug 19 | SPL Injection through the REST API in Splunk Enterprise Security Affected: before 8.6.1 |
| CVE-2024-22165 | 6.5 | Jan 9 | In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS) Affected: 7.1.0 before 7.1.2 |
| CVE-2024-22164 | 4.3 | Jan 9 | In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation Affected: 7.1.0 before 7.1.2 |
Showing 5