Splunk · weakness class
Input Validation and Logic
40 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 40 is a mark on the map. Named now: 1 to 26, most at risk first.
- Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise
- Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of s…
- Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote attackers to cause a denial of service via…
- Path Traversal in search parameter results in external content injection
- Risky commands warnings in Splunk Enterprise Dashboards
- SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
- Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.…
- Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
- Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise
- Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise
- Risky command safeguards bypass via rex search command field names in Splunk Enterprise
- Risky command safeguards bypass in Dashboard Examples Hub
- Denial of Service via the 'dump' SPL command
- SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
- SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise
- Host Header Injection in Splunk Enterprise
- Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation
- Improper Neutralization in Splunk Enterprise
- Improper Input Validation in "label" column field in Splunk Secure Gateway App
- Improper Check or Handling of Exceptional Conditions in Splunk SOAR
- SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise
- Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio
- Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise
- Information Disclosure through External Content Restriction Bypass in Splunk Enterprise
- SPL Injection through the REST API in Splunk Enterprise Security
- Security Hardening in Splunk Enterprise - October 2026
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.