Splunk Enterprise.

Security Hardening in Splunk Enterprise - October 2026

• Splunk Enterprise
• CWE-707

Security Hardening in Splunk Enterprise - October 2026

• Splunk Enterprise
• CWE-693

Security Hardening in Splunk Enterprise - October 2026

• Splunk Enterprise
• CWE-664

Security Hardening in Splunk Enterprise - October 2026

• Splunk Enterprise
• Broken access control

Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise

• Splunk Enterprise
• Hard-coded credentials

Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise

• Splunk Enterprise
• Cross-site request forgery (CSRF)

Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise

• Splunk Enterprise
• Broken access control

SPL Injection through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

Improper Access Control in Field Extraction Management in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise

• Splunk Enterprise
• Code injection

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise

• Splunk Enterprise
• Denial of service

Denial of Service (DoS) through the REST API in Splunk Enterprise

• Splunk Enterprise
• Denial of service

Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise

• Splunk Enterprise
• Denial of service

Authorization Bypass in the Data Management REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Adherence to Coding Standards in Splunk Enterprise

• Splunk Enterprise
• CWE-710

Improper Neutralization in Splunk Enterprise

• Splunk Enterprise
• CWE-707

Protection Mechanism Failure in Splunk Enterprise

• Splunk Enterprise
• CWE-693

Improper Control of a Resource Through its Lifetime in Splunk Enterprise

• Splunk Enterprise
• CWE-664

Improper Access Control in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Improper Input Validation of Index Names through the collect Command in Splunk Enterprise

• Splunk Enterprise
• CWE-20

Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise

• Splunk Enterprise
• CWE-20

Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise

• Splunk Enterprise
• CWE-1188

Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud

• Splunk Enterprise
• Server-side request forgery (SSRF)

Improper Input Validation through the collect Command in Splunk Enterprise

• Splunk Enterprise
• CWE-20

Missing Access Control through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

• Splunk Enterprise
• Denial of service

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

• Splunk Enterprise
• SQL injection

Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

• Splunk Enterprise
• Authentication bypass

Log Injection through the REST API in Splunk App for Splunk O11y Cloud

• Splunk Enterprise
• Other injection

Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Improper Authorization through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise

• Splunk Enterprise
• Authentication bypass

Path Traversal through Search Head Clustering in Splunk Enterprise

• Splunk Enterprise
• CWE-158

Path Traversal through Knowledge Bundle Replication in Splunk Enterprise

• Splunk Enterprise
• Path traversal

Improper Authorization through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Server-side request forgery (SSRF)

Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

SPL Injection through Splunk Web Form Tokens in Splunk Enterprise

• Splunk Enterprise
• Other injection

Missing Authorization in Search Head Cluster Member Controls in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Server-side request forgery (SSRF)

Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Path Traversal through the Search Dispatch REST API in Splunk Enterprise

• Splunk Enterprise
• CWE-27

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• SQL injection

Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

SPL Injection through the geostats Command in Splunk Enterprise

• Splunk Enterprise
• Command injection

Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise

• Splunk Enterprise
• Authentication bypass

Path Traversal through Splunk Web Static File Serving in Splunk Enterprise

• Splunk Enterprise
• Path traversal

Improper Access Control through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

• Splunk Enterprise
• Code injection

SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise

• Splunk Enterprise
• Cross-site request forgery (CSRF)