Advisories · Technology
Splunk Enterprise Cloud.
Every CVE that names Splunk Enterprise Cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise
- Splunk Enterprise
- Splunk Enterprise Cloud
- Denial of service
- CVSS 4.3 Medium
Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise
- Splunk Enterprise
- Splunk Enterprise Cloud
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
- Splunk Enterprise
- Splunk Enterprise Cloud
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
Improper Access Control in System Source Types Configuration in Splunk Enterprise
- Splunk Enterprise
- Splunk Enterprise Cloud
- Broken access control
- CVSS 6.3 Medium
Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise
- Splunk Enterprise
- Splunk Enterprise Cloud
- Path traversal