16 exploited vulnerabilities in Splunk Enterprise

Vulnerabilities with publicly known exploits

Vendors: Splunk
With known exploits: 16
Affected Splunk versions: < 10.0.7, 10.2.4, 8.1.14, 8.2.11, 9.0.5, 9.0.7, 9.1.2, 8.1.12, 8.2.9, 9.0.2, 8.1.13, 8.2.10, 9.0.4, 9.0.10, 9.1.5, 9.2.2, 6.6.11, 6.5.1
Affected Splunk Splunk Cloud Platform versions: < 9.0.2303.100, 9.0.2209, 9.0.2205, 9.0.2209.3, 9.0.2208, 9.1.2308.209, 9.1.2312.109, 9.1.2312.202, 9.1.2308.207, 9.1.2312.200
Affected Splunk Cloud versions: < 9.1.2308

CVE-2026-20253 5 exploits

CVSS 9.8 CRITICAL 2026-06-10FIX AVAILABLE

Exploit for Missing Authentication for Critical Function in Splunk Exploit for Missing Authentication for Critical Function in Splunk

CVE-2023-32707 7 exploits

CVSS 9.0 HIGH 2023-06-01FIX AVAILABLE

Exploit for Improper Authorization in Splunk Splunk edit_user Capability Privilege Escalation Exploit

CVE-2023-46214 4 exploits

CVSS 8.8 HIGH 2023-11-16FIX AVAILABLE

Splunk Authenticated XSLT Upload RCE Splunk XSLT Upload Remote Code Execution Exploit

CVE-2022-43571 4 exploits

CVSS 8.8 HIGH 2022-11-03FIX AVAILABLE

📄 Splunk Enterprise 8.2.9 / 9.0.2 Authenticated Remote Code Execution Authenticated RCE in Splunk (SimpleXML dashboard PDF generation)

CVSS 8.8 HIGH 2022-11-04FIX AVAILABLE

CVSS 8.8 HIGH 2022-11-04FIX AVAILABLE

CVSS 8.0 HIGH 2023-02-14FIX AVAILABLE

CVSS 8.0 HIGH 2023-02-14FIX AVAILABLE

CVSS 8.0 HIGH 2022-11-04FIX AVAILABLE

CVSS 8.0 HIGH 2022-11-04FIX AVAILABLE

CVE-2024-36991 10 exploits

CVSS 7.8 HIGH 2024-07-01FIX AVAILABLE

Exploit for Path Traversal in Splunk Exploit for Path Traversal in Splunk

CVSS 7.0 HIGH 2018-10-19

CVSS 6.8 MEDIUM 2024-07-01FIX AVAILABLE

CVSS 6.4 MEDIUM 2022-11-03FIX AVAILABLE

CVSS 5.4 MEDIUM 2024-07-01FIX AVAILABLE

CVE-2017-5607 5 exploits

CVSS 3.5 LOW 2017-04-10FIX AVAILABLE

Splunk Enterprise Information Theft (CVE-2017-5607)Splunk Enterprise Multiple Version Information Disclosure