Login Request a demo
SC
Product
Splunk Cloud Platform
by Splunk · last CVE Jul 15, 2026
109
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities109In the news0Timeline
Severity mix
Critical 1High 32Medium 71Low 5
Severity
All severities109Critical1High32Medium71Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Splunk Cloud Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20379
3.5
0%
Nov 12
Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise
Affected: 9.3.2411 before 9.3.2411.116; 9.3.2408 before 9.3.2408.124; 10.0.2503 before 10.0.2503.5; 10.1.2507 before 10.1.2507.1
CVE-2024-45737
3.5
0%
Oct 14
Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
Affected: 9.2.2403 before 9.2.2403.108; 9.1.2312 before 9.1.2312.204
CVE-2024-36995
3.5
0%
Jul 1
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the…
Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312 before 9.1.2312.200
CVE-2022-37438
3.5
1%
Aug 16
In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real…
Affected: through 8.2.2203.4
CVE-2025-20388
2.7
0%
Dec 3
Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise
Affected: 10.1.2507 before 10.1.2507.4; 10.0.2503 before 10.0.2503.6; 9.3.2411 before 9.3.2411.116
Showing 5