Splunk · weakness class
File and Path Handling
24 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
- likely to be exploited
- 1
Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.
- Splunk Enterprise - Local File Inclusion
- Path Traversal in Splunk App for Lookup File Editing
- Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (…
- Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE…
- Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise
- Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authe…
- Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.…
- Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary file…
- Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041.
- Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
- Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk
- Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
- Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR
- Path Traversal through App Installation Tar Extraction in Splunk SOAR
- Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise
- Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR
- Path Traversal through the Search Dispatch REST API in Splunk Enterprise
- Files or Directories Accessible to External Parties in Splunk SOAR
- Path Traversal through Splunk Web Static File Serving in Splunk Enterprise
- Path Traversal through Knowledge Bundle Replication in Splunk Enterprise
- Path Traversal through Automation Broker in Splunk SOAR
- Insecure File Upload in the indexing/preview REST endpoint
- Absolute Path Traversal in Splunk Enterprise Using runshellscript.py
- Local privilege escalation via a default path in Splunk Enterprise Windows
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.