# Splunk Enterprise. Every CVE that names Splunk Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76333.md) `CVE-2026-76333` · CVE record: Splunk Splunk Enterprise · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [SPL Injection through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76332.md) `CVE-2026-76332` · CVE record: Splunk Splunk Enterprise · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-20 - [SPL Injection through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76331.md) `CVE-2026-76331` · CVE record: Splunk Splunk Enterprise · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76330.md) `CVE-2026-76330` · CVE record: Splunk Splunk Enterprise · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-20 - [SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76329.md) `CVE-2026-76329` · CVE record: Splunk Splunk Enterprise · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [SPL Injection through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76328.md) `CVE-2026-76328` · CVE record: Splunk Splunk Enterprise · CVSS 6.7 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Command injection - [SPL Injection through Splunk Web in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76327.md) `CVE-2026-76327` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76326.md) `CVE-2026-76326` · CVE record: Splunk Splunk Enterprise · CVSS 5.7 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76325.md) `CVE-2026-76325` · CVE record: Splunk Splunk Enterprise · CVSS 7.3 High · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76324.md) `CVE-2026-76324` · CVE record: Splunk Splunk Enterprise · CVSS 5.7 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76323.md) `CVE-2026-76323` · CVE record: Splunk Splunk Enterprise · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-20 - [SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76322.md) `CVE-2026-76322` · CVE record: Splunk Splunk Enterprise · CVSS 6.7 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [SPL Injection through Nearby Event Searches in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76321.md) `CVE-2026-76321` · CVE record: Splunk Splunk Enterprise · CVSS 7.3 High · Not analysed yet · Published 19 Aug 2026 · Tags: Command injection - [SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76320.md) `CVE-2026-76320` · CVE record: Splunk Splunk Enterprise · CVSS 5.9 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [Remote Code Execution (RCE) through Federated Search in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76319.md) `CVE-2026-76319` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76318.md) `CVE-2026-76318` · CVE record: Splunk Splunk Enterprise · CVSS 5.7 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [Path Traversal through the Lookup Configuration REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76317.md) `CVE-2026-76317` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-26 - [Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76316.md) `CVE-2026-76316` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [Code Injection through Splunk Web Manager Configuration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76315.md) `CVE-2026-76315` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76314.md) `CVE-2026-76314` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [Remote Code Execution (RCE) through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76313.md) `CVE-2026-76313` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Improper Access Control through Embedded Reports in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76312.md) `CVE-2026-76312` · CVE record: Splunk Splunk Enterprise · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76311.md) `CVE-2026-76311` · CVE record: Splunk Splunk Enterprise · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76310.md) `CVE-2026-76310` · CVE record: Splunk Splunk Enterprise · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76309.md) `CVE-2026-76309` · CVE record: Splunk Splunk Enterprise · CVSS 4.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: SQL injection - [Improper Access Control through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76263.md) `CVE-2026-76263` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76262.md) `CVE-2026-76262` · CVE record: Splunk Splunk Enterprise · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Information disclosure - [Insecure Default Access Control List through the REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76261.md) `CVE-2026-76261` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76260.md) `CVE-2026-76260` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Improper Privilege Management on the Management Port in Splunk Enterprise for Windows](https://agentprime.io/advisories/CVE-2026-76259.md) `CVE-2026-76259` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76258.md) `CVE-2026-76258` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Hard-coded credentials - [Missing Authorization through REST API Endpoints in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76257.md) `CVE-2026-76257` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Information Exposure through REST API Endpoints in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76256.md) `CVE-2026-76256` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Information disclosure - [Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76255.md) `CVE-2026-76255` · CVE record: Splunk Splunk Enterprise · CVSS 6.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76254.md) `CVE-2026-76254` · CVE record: Splunk Splunk Enterprise · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection - [Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76253.md) `CVE-2026-76253` · CVE record: Splunk Splunk Enterprise · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Privilege escalation - [Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76252.md) `CVE-2026-76252` · CVE record: Splunk Splunk Enterprise · CVSS 6.8 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Cross-site scripting (XSS) - [Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud](https://agentprime.io/advisories/CVE-2026-76251.md) `CVE-2026-76251` · CVE record: Splunk Splunk Enterprise · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20298.md) `CVE-2026-20298` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Information disclosure - [SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20296.md) `CVE-2026-20296` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 8.3 High · Not analysed yet · Published 15 Jul 2026 · Tags: Cross-site request forgery (CSRF) - [Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20297.md) `CVE-2026-20297` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.2 High · Not analysed yet · Published 15 Jul 2026 · Tags: Path traversal - [Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20258.md) `CVE-2026-20258` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jun 2026 · Tags: Cross-site scripting (XSS) - [Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20253.md) `CVE-2026-20253` · CVE record: Splunk Splunk Enterprise · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.97 · Not analysed yet · Published 10 Jun 2026 · Tags: Authentication bypass - [Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20252.md) `CVE-2026-20252` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.6 High · Not analysed yet · Published 10 Jun 2026 · Tags: Server-side request forgery (SSRF) - [Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20257.md) `CVE-2026-20257` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-20 - [Improper Access Control in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20259.md) `CVE-2026-20259` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Broken access control - [Improper Input Validation through Classic Dashboards in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20255.md) `CVE-2026-20255` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-20 - [Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-20251.md) `CVE-2026-20251` · CVE record: Splunk Splunk Enterprise and 2 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.32 · Not analysed yet · Published 10 Jun 2026 · Tags: Insecure deserialization - [Information Disclosure through External Content Restriction Bypass in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20254.md) `CVE-2026-20254` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-20 - [Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20256.md) `CVE-2026-20256` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-20 - [Sensitive Information Disclosure through Log Files in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20239.md) `CVE-2026-20239` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 May 2026 · Tags: Information disclosure - [Denial of Service through coldToFrozen.sh Script in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20240.md) `CVE-2026-20240` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.1 High · Not analysed yet · Published 20 May 2026 · Tags: CWE-20 - [Improper Access Control in Data Model Acceleration in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20203.md) `CVE-2026-20203` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Broken access control - [Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20204.md) `CVE-2026-20204` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Apr 2026 · Tags: CWE-377 - [Improper Input Validation during User Account Creation in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20202.md) `CVE-2026-20202` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: CWE-176 - [Remote Command Execution (RCE) through the '/splunkd/\_\_upload/indexing/preview' REST endpoint in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20163.md) `CVE-2026-20163` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 8.0 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection - [Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20162.md) `CVE-2026-20162` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS) - [Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20166.md) `CVE-2026-20166` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Information disclosure - [Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20164.md) `CVE-2026-20164` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Information disclosure - [Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-20165.md) `CVE-2026-20165` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Information disclosure Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .