[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f02VD6QBF9vYhRsfirpbxN4j5OHZ8b1blp0pf0rsJnP4":3,"g5a-ex:splunk\u002Fsplunk_cloud_platform@*":300,"g5a-family:splunk\u002Fsplunk_cloud_platform":302},{"success":4,"data":5},true,{"product":6,"versions":150,"topVulnerabilitiesByEpss":218,"kevVulnerabilities":277,"seoMetadata":278,"meta":297},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":149},"splunk","splunk_cloud_platform",67,77,0,"2025-10-01",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.2103",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2105",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2106",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2107",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2109",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2111",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2112",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2201",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2202",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.2203",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2209",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2209.3",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2305.100",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2305.200",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2308",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2308.207",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2308.212",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2308.214",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.100",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.108",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.109",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.204",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.206",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.2312.208",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.100",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.107",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.108",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.109",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.111",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.113",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.114",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2403.115",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.100",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.106",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.107",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.108",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.111",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.113",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.118",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.119",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.121",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.122",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.2406.123",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.100",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.101",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.103",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.104",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.107",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.111",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.112",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.113",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.114",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.117",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.118",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2408.119",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.102",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.103",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.104",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.107",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.108",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.109",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.2411.111","Splunk Cloud Platform by Splunk is a technology product with 67 tracked versions and 77 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},[219,227,234,240,246,252,257,263,268,272],{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":226},"CVE-2023-32707","In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted web requests.","2023-06-01",8.8,"v3.1","High",0.79019,{"cveId":228,"description":229,"publishedDate":230,"cvssScore":231,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":233},"CVE-2022-43568","In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.\n","2022-11-04",6.1,"Medium",0.42801,{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":239},"CVE-2025-20297","In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could craft a malicious payload through the pdfgen\u002Frender REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.","2025-06-02",4.3,0.29302,{"cveId":241,"description":242,"publishedDate":243,"cvssScore":244,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":245},"CVE-2025-20229","In Splunk Enterprise versions below 9.3.3, 9.2.5,  and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2.2406.108, 9.2.2403.114, and 9.1.2312.208, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could perform a Remote Code Execution (RCE) through a file upload to the \"$SPLUNK_HOME\u002Fvar\u002Frun\u002Fsplunk\u002Fapptemp\" directory due to missing authorization checks.","2025-03-26",8,0.16021,{"cveId":247,"description":248,"publishedDate":249,"cvssScore":250,"cvssVersion":224,"severity":232,"isKev":16,"epssScore":251},"CVE-2024-45741","In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could create a malicious payload through a custom configuration file that the \"api.uri\" parameter from the \"\u002Fmanager\u002Fsearch\u002Fapps\u002Flocal\" endpoint in Splunk Web calls. This could result in execution of unauthorized JavaScript code in the browser of a user.","2024-10-14",5.4,0.14798,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":223,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":256},"CVE-2022-43571","In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.\n\n","2022-11-03",0.14062,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":262},"CVE-2022-32155","In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the universal forwarder now binds the management port to localhost preventing remote logins by default. If management services are not required in versions before 9.0, set disableDefaultPort = true in server.conf OR allowRemoteLogin = never in server.conf OR mgmtHostPort = localhost in web.conf. See Configure universal forwarder management security (https:\u002F\u002Fdocs.splunk.com\u002FDocumentation\u002FSplunk\u002F9.0.0\u002FSecurity\u002FEnableTLSCertHostnameValidation#Configure_universal_forwarder_management_security) for more information on disabling the remote management services.","2022-06-15",7.5,0.01976,{"cveId":264,"description":265,"publishedDate":260,"cvssScore":266,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":267},"CVE-2022-32154","Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is used in a query in a cross-origin request. The result bypasses SPL safeguards for risky commands. See New capabilities can limit access to some custom and potentially risky commands (https:\u002F\u002Fdocs.splunk.com\u002FDocumentation\u002FSplunk\u002F9.0.0\u002FSecurity\u002FSPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands) for more information. Note that the attack is browser-based and an attacker cannot exploit it at will.",8.1,0.01431,{"cveId":269,"description":270,"publishedDate":230,"cvssScore":223,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":271},"CVE-2022-43567","In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.\n",0.01304,{"cveId":273,"description":274,"publishedDate":275,"cvssScore":244,"cvssVersion":224,"severity":225,"isKev":16,"epssScore":276},"CVE-2023-22934","In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a higher privileged user to initiate a request within their browser.","2023-02-14",0.01121,[],{"title":279,"metaDescription":280,"keywords":281,"structuredData":282},"Splunk Cloud Platform by Splunk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Splunk Cloud Platform by Splunk covering 67 versions with 77 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Splunk Cloud Platform vulnerabilities, Splunk Cloud Platform security, Splunk Cloud Platform CVE, Splunk Splunk Cloud Platform, Splunk Cloud Platform threat intelligence, Splunk security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":283,"@type":284,"name":285,"description":280,"url":286,"manufacturer":287,"applicationCategory":291,"softwareVersion":292,"mainEntity":293},"https:\u002F\u002Fschema.org","SoftwareApplication","Splunk Cloud Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsplunk\u002Fsplunk_cloud_platform",{"@type":288,"name":289,"url":290},"Organization","Splunk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsplunk","Security Software","67 versions tracked",{"@type":294,"name":295,"description":296,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Splunk Cloud Platform Security Vulnerabilities","Security vulnerabilities affecting Splunk Cloud Platform by Splunk",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":298,"apiVersion":299},"2026-10-17T14:10:13.417Z","3.0",{"rows":301,"total":11,"capped":16,"failed":11},[],[]]