agentprime: splunk-cloud-platformEvery new CVE for splunk-cloud-platform.https://agentprime.io/CVE-2026-20298: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20298/https://agentprime.io/advisories/CVE-2026-20298/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 17:18:32 GMTCVECVE-2026-20296: SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20296/https://agentprime.io/advisories/CVE-2026-20296/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 17:18:23 GMTCVECVE-2026-20297: Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20297/https://agentprime.io/advisories/CVE-2026-20297/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 17:18:13 GMTCVECVE-2026-20258: Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20258/https://agentprime.io/advisories/CVE-2026-20258/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:23 GMTCVECVE-2026-20252: Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20252/https://agentprime.io/advisories/CVE-2026-20252/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:19 GMTCVECVE-2026-20257: Improper Input Validation through Classic Dashboard CSS in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20257/https://agentprime.io/advisories/CVE-2026-20257/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:03 GMTCVECVE-2026-20259: Improper Access Control in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20259/https://agentprime.io/advisories/CVE-2026-20259/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:02 GMTCVECVE-2026-20255: Improper Input Validation through Classic Dashboards in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20255/https://agentprime.io/advisories/CVE-2026-20255/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:00 GMTCVECVE-2026-20251: Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gatewayhttps://agentprime.io/advisories/CVE-2026-20251/https://agentprime.io/advisories/CVE-2026-20251/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.32 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:16:00 GMTCVEcriticalCVE-2026-20254: Information Disclosure through External Content Restriction Bypass in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20254/https://agentprime.io/advisories/CVE-2026-20254/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:15:59 GMTCVECVE-2026-20256: Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20256/https://agentprime.io/advisories/CVE-2026-20256/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 17:15:55 GMTCVECVE-2026-20239: Sensitive Information Disclosure through Log Files in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20239/https://agentprime.io/advisories/CVE-2026-20239/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 16:32:12 GMTCVECVE-2026-20240: Denial of Service through coldToFrozen.sh Script in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20240/https://agentprime.io/advisories/CVE-2026-20240/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 16:32:05 GMTCVECVE-2026-20203: Improper Access Control in Data Model Acceleration in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20203/https://agentprime.io/advisories/CVE-2026-20203/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 15:17:56 GMTCVECVE-2026-20204: Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20204/https://agentprime.io/advisories/CVE-2026-20204/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 15:17:54 GMTCVECVE-2026-20202: Improper Input Validation during User Account Creation in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20202/https://agentprime.io/advisories/CVE-2026-20202/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 15:17:43 GMTCVECVE-2026-20163: Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20163/https://agentprime.io/advisories/CVE-2026-20163/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:18:26 GMTCVECVE-2026-20162: Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20162/https://agentprime.io/advisories/CVE-2026-20162/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:18:22 GMTCVECVE-2026-20166: Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20166/https://agentprime.io/advisories/CVE-2026-20166/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:18:17 GMTCVECVE-2026-20164: Sensitive Information Disclosure through Improper Access Control in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20164/https://agentprime.io/advisories/CVE-2026-20164/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:18:01 GMTCVECVE-2026-20165: Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20165/https://agentprime.io/advisories/CVE-2026-20165/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 16:17:54 GMTCVECVE-2026-20139: Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20139/https://agentprime.io/advisories/CVE-2026-20139/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 16:45:32 GMTCVECVE-2026-20144: Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20144/https://agentprime.io/advisories/CVE-2026-20144/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 16:45:23 GMTCVECVE-2026-20137: Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2026-20137/https://agentprime.io/advisories/CVE-2026-20137/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 16:45:17 GMTCVECVE-2025-20388: Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20388/https://agentprime.io/advisories/CVE-2025-20388/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:59 GMTCVECVE-2025-20389: Improper Input Validation in "label" column field in Splunk Secure Gateway Apphttps://agentprime.io/advisories/CVE-2025-20389/https://agentprime.io/advisories/CVE-2025-20389/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:55 GMTCVECVE-2025-20383: Improper access control through push notifications for reports and alerts in Splunk Secure Gateway apphttps://agentprime.io/advisories/CVE-2025-20383/https://agentprime.io/advisories/CVE-2025-20383/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:36 GMTCVECVE-2025-20384: Unauthenticated Log Injection in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20384/https://agentprime.io/advisories/CVE-2025-20384/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:34 GMTCVECVE-2025-20385: Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20385/https://agentprime.io/advisories/CVE-2025-20385/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:29 GMTCVECVE-2025-20382: URL validation bypass through Views Dashboard in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20382/https://agentprime.io/advisories/CVE-2025-20382/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 17:00:21 GMTCVECVE-2025-20379: Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20379/https://agentprime.io/advisories/CVE-2025-20379/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 17:23:00 GMTCVECVE-2025-20378: Open Redirect on Web Login endpoint in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20378/https://agentprime.io/advisories/CVE-2025-20378/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 17:22:56 GMTCVECVE-2025-20368: Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20368/https://agentprime.io/advisories/CVE-2025-20368/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Oct 2025 16:08:04 GMTCVECVE-2025-20371: Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20371/https://agentprime.io/advisories/CVE-2025-20371/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Oct 2025 16:08:02 GMTCVECVE-2025-20367: Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20367/https://agentprime.io/advisories/CVE-2025-20367/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Oct 2025 16:08:01 GMTCVECVE-2025-20366: Improper Access Control in Background Job Submission in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20366/https://agentprime.io/advisories/CVE-2025-20366/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Oct 2025 16:07:56 GMTCVECVE-2025-20369: Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20369/https://agentprime.io/advisories/CVE-2025-20369/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Oct 2025 16:07:52 GMTCVECVE-2025-20325: Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20325/https://agentprime.io/advisories/CVE-2025-20325/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 17:48:02 GMTCVECVE-2025-20300: Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20300/https://agentprime.io/advisories/CVE-2025-20300/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 17:47:58 GMTCVECVE-2025-20297: Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation componenthttps://agentprime.io/advisories/CVE-2025-20297/https://agentprime.io/advisories/CVE-2025-20297/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jun 2025 17:14:02 GMTCVECVE-2025-20232: Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20232/https://agentprime.io/advisories/CVE-2025-20232/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 22:06:00 GMTCVECVE-2025-20229: Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20229/https://agentprime.io/advisories/CVE-2025-20229/CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 22:05:09 GMTCVEcriticalCVE-2025-20228: Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20228/https://agentprime.io/advisories/CVE-2025-20228/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 22:04:31 GMTCVECVE-2025-20227: Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studiohttps://agentprime.io/advisories/CVE-2025-20227/https://agentprime.io/advisories/CVE-2025-20227/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 22:03:50 GMTCVECVE-2025-20226: Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprisehttps://agentprime.io/advisories/CVE-2025-20226/https://agentprime.io/advisories/CVE-2025-20226/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Mar 2025 22:02:10 GMTCVECVE-2024-53244: Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameterhttps://agentprime.io/advisories/CVE-2024-53244/https://agentprime.io/advisories/CVE-2024-53244/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:01:24 GMTCVECVE-2024-53246: Sensitive Information Disclosure through SPL commandshttps://agentprime.io/advisories/CVE-2024-53246/https://agentprime.io/advisories/CVE-2024-53246/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:01:16 GMTCVECVE-2024-53245: Information Disclosure due to Username Collision with a Role that has the same Name as the Userhttps://agentprime.io/advisories/CVE-2024-53245/https://agentprime.io/advisories/CVE-2024-53245/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:00:33 GMTCVECVE-2024-45737: Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)https://agentprime.io/advisories/CVE-2024-45737/https://agentprime.io/advisories/CVE-2024-45737/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:03:37 GMTCVECVE-2024-45732: Low-privileged user could run search as nobody in SplunkDeploymentServerConfig apphttps://agentprime.io/advisories/CVE-2024-45732/https://agentprime.io/advisories/CVE-2024-45732/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:03:35 GMTCVE