Splunk · weakness class
Information Disclosure
44 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.
- Splunk <=7.0.1 - Information Disclosure
- Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk…
- Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise
- Username enumeration through lockout message in REST API
- Error message discloses internal path
- Information disclosure via the dashboard drilldown in Splunk Enterprise
- Sensitive Information Disclosure in Splunk Secure Gateway App
- Sensitive information disclosure in AdminManager logging channel
- Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
- Sensitive Information Disclosure through Log Files in Splunk Enterprise
- Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise
- Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise
- Sensitive information disclosure in REST_Calls logging channel
- Session Token Disclosure to Internal Log Files in Splunk Add-on Builder
- Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter
- Information Disclosure via the ‘copyresults’ SPL Command
- Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR
- Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise
- Server Response Disclosure in RapidDiag Salesforce.com Log File
- Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud
- Risky command safeguards bypass through Search ID query in Analytics Workspace
- Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder
- Information Disclosure through the REST API in Splunk SOAR
- Information Disclosure due to Username Collision with a Role that has the same Name as the User
- Information Disclosure of user names
- Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.