Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: splunk-cloud-platform Clear
ID Title
CVE-2026-20298 Information Disclosure in splunk (CVE-2026-20298)
vulnerability in splunk (CVE-2026-20298). Confidential information can be exposed externally. Exploitable via ``encr_password``.
CVE-2026-20296 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-20296)
vulnerability in csrf (CVE-2026-20296). Confidential information can be exposed externally. Exploitable via ``list_deployment_server``.
CVE-2026-20297 Path Traversal in path-traversal (CVE-2026-20297)
path traversal in path-traversal (CVE-2026-20297). Successful exploitation can lead to full system takeover. Exploitable via ``edit_local_apps``.
CVE-2026-20252 SSRF (Server-Side Request Forgery) in splunk (CVE-2026-20252)
SSRF in splunk (CVE-2026-20252). Confidential information can be exposed externally.
CVE-2026-20256 Vulnerability in splunk (CVE-2026-20256)
vulnerability in splunk (CVE-2026-20256). Confidential information can be exposed externally.
CVE-2026-20255 Vulnerability in splunk (CVE-2026-20255)
vulnerability in splunk (CVE-2026-20255). Confidential information can be exposed externally.
CVE-2026-20258 Cross-Site Scripting (XSS) in splunk (CVE-2026-20258)
cross-site scripting in splunk (CVE-2026-20258). Successful exploitation can lead to full system takeover.
CVE-2026-20257 Vulnerability in splunk (CVE-2026-20257)
vulnerability in splunk (CVE-2026-20257). Confidential information can be exposed externally.
CVE-2026-20251 Unsafe Deserialization in deserialization (CVE-2026-20251)
vulnerability in deserialization (CVE-2026-20251). Successful exploitation can lead to full system takeover.
CVE-2026-20259 Vulnerability in splunk (CVE-2026-20259)
vulnerability in splunk (CVE-2026-20259). Confidential information can be exposed externally. Exploitable via ``edit_saved_search_owner``.
CVE-2026-20254 Vulnerability in splunk (CVE-2026-20254)
vulnerability in splunk (CVE-2026-20254). Confidential information can be exposed externally.
CVE-2026-20239 Vulnerability in splunk (CVE-2026-20239)
vulnerability in splunk (CVE-2026-20239). Successful exploitation can lead to full system takeover. Exploitable via ``_internal``.
CVE-2026-20240 Vulnerability in dos (CVE-2026-20240)
vulnerability in dos (CVE-2026-20240). Risk of unauthorized operations or information disclosure. Exploitable via ``coldToFrozen.sh``.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →