Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-20298 |
|
Information Disclosure in splunk (CVE-2026-20298)
vulnerability in splunk (CVE-2026-20298). Confidential information can be exposed externally. Exploitable via ``encr_password``.
|
| CVE-2026-20296 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-20296)
vulnerability in csrf (CVE-2026-20296). Confidential information can be exposed externally. Exploitable via ``list_deployment_server``.
|
| CVE-2026-20297 |
|
Path Traversal in path-traversal (CVE-2026-20297)
path traversal in path-traversal (CVE-2026-20297). Successful exploitation can lead to full system takeover. Exploitable via ``edit_local_apps``.
|
| CVE-2026-20252 |
|
SSRF (Server-Side Request Forgery) in splunk (CVE-2026-20252)
SSRF in splunk (CVE-2026-20252). Confidential information can be exposed externally.
|
| CVE-2026-20256 |
|
Vulnerability in splunk (CVE-2026-20256)
vulnerability in splunk (CVE-2026-20256). Confidential information can be exposed externally.
|
| CVE-2026-20255 |
|
Vulnerability in splunk (CVE-2026-20255)
vulnerability in splunk (CVE-2026-20255). Confidential information can be exposed externally.
|
| CVE-2026-20258 |
|
Cross-Site Scripting (XSS) in splunk (CVE-2026-20258)
cross-site scripting in splunk (CVE-2026-20258). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20257 |
|
Vulnerability in splunk (CVE-2026-20257)
vulnerability in splunk (CVE-2026-20257). Confidential information can be exposed externally.
|
| CVE-2026-20251 |
|
Unsafe Deserialization in deserialization (CVE-2026-20251)
vulnerability in deserialization (CVE-2026-20251). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20259 |
|
Vulnerability in splunk (CVE-2026-20259)
vulnerability in splunk (CVE-2026-20259). Confidential information can be exposed externally. Exploitable via ``edit_saved_search_owner``.
|
| CVE-2026-20254 |
|
Vulnerability in splunk (CVE-2026-20254)
vulnerability in splunk (CVE-2026-20254). Confidential information can be exposed externally.
|
| CVE-2026-20239 |
|
Vulnerability in splunk (CVE-2026-20239)
vulnerability in splunk (CVE-2026-20239). Successful exploitation can lead to full system takeover. Exploitable via ``_internal``.
|
| CVE-2026-20240 |
|
Vulnerability in dos (CVE-2026-20240)
vulnerability in dos (CVE-2026-20240). Risk of unauthorized operations or information disclosure. Exploitable via ``coldToFrozen.sh``.
|