Splunk · weakness class
Denial of Service
18 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise
- Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise
- Denial of Service in Splunk Enterprise through search macros
- Denial of Service (DoS) on the datamodel/web REST endpoint
- Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise
- Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request
- Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
- Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)
- Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise
- Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise
- Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments
- Denial of Service (DoS) via the ‘printf’ Search Function
- Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
- Denial of Service (DoS) through the REST API in Splunk Connect for Kafka
- Denial of Service (DoS) through the REST API in Splunk Enterprise
- Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise
- Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise
- Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.