Advisories · Technology
Splunk MCP Server.
Every CVE that names Splunk MCP Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server
- Splunk MCP Server
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app
- Splunk MCP Server
- Information disclosure
- CVSS 5.4 Medium
SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool
- Splunk MCP Server
- Broken access control