# Splunk vulnerabilities > Splunk has 238 published vulnerabilities across 15 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Splunk, with 166. If you run Splunk software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/splunk ## At a glance - **Published vulnerabilities:** 238 - **Known to be exploited:** 1 - **Products:** 15 - **Versions:** 461 - **Most recently added to the known-exploited list:** [CVE-2014-0160](https://www.precursorintelligence.com/what-is/cve-2014-0160), 4 May 2022. We keep watching the list. ## Which Splunk products have the most vulnerabilities? - [Splunk](https://www.precursorintelligence.com/product/splunk/splunk): 166 published vulnerabilities, 288 versions - [Splunk Cloud Platform](https://www.precursorintelligence.com/product/splunk/splunk_cloud_platform): 77 published vulnerabilities, 67 versions - [Universal Forwarder](https://www.precursorintelligence.com/product/splunk/universal_forwarder): 61 published vulnerabilities, 47 versions - [Cloud](https://www.precursorintelligence.com/product/splunk/cloud): 9 published vulnerabilities, 8 versions - [Add-on Builder](https://www.precursorintelligence.com/product/splunk/add-on_builder): 3 published vulnerabilities, 4 versions - [Splunk App for Lookup File Editing](https://www.precursorintelligence.com/product/splunk/splunk_app_for_lookup_file_editing): 3 published vulnerabilities, 1 version - [Splunk Secure Gateway](https://www.precursorintelligence.com/product/splunk/splunk_secure_gateway): 2 published vulnerabilities, 0 versions - [Enterprise Security](https://www.precursorintelligence.com/product/splunk/enterprise_security): 2 published vulnerabilities, 3 versions - [Software Development Kit](https://www.precursorintelligence.com/product/splunk/software_development_kit): 1 published vulnerability, 24 versions - [Hadoop Connect](https://www.precursorintelligence.com/product/splunk/hadoop_connect): 1 published vulnerability, 0 versions Each product page lists its own known-exploited flaws. ## Which Splunk vulnerabilities are being exploited? 1 flaw is on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2014-0160](https://www.precursorintelligence.com/what-is/cve-2014-0160): OpenSSL Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 4 May 2022. ## Which Splunk flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2014-0160](https://www.precursorintelligence.com/what-is/cve-2014-0160): >99%, High (CVSS 7.5), known exploited - [CVE-2018-11409](https://www.precursorintelligence.com/what-is/cve-2018-11409): 98%, Medium (CVSS 5.3) - [CVE-2023-46214](https://www.precursorintelligence.com/what-is/cve-2023-46214): 89%, High (CVSS 8.8) - [CVE-2023-32707](https://www.precursorintelligence.com/what-is/cve-2023-32707): 79%, High (CVSS 8.8) - [CVE-2021-22901](https://www.precursorintelligence.com/what-is/cve-2021-22901): 64%, High (CVSS 8.1) - [CVE-2023-32714](https://www.precursorintelligence.com/what-is/cve-2023-32714): 43%, High (CVSS 8.1) - [CVE-2022-43568](https://www.precursorintelligence.com/what-is/cve-2022-43568): 43%, Medium (CVSS 6.1) - [CVE-2022-32206](https://www.precursorintelligence.com/what-is/cve-2022-32206): 36%, Medium (CVSS 6.5) - [CVE-2022-32205](https://www.precursorintelligence.com/what-is/cve-2022-32205): 31%, Medium (CVSS 4.3) - [CVE-2025-20297](https://www.precursorintelligence.com/what-is/cve-2025-20297): 29%, Medium (CVSS 4.3) ## All Splunk products we track 13 products with at least one tracked version, most vulnerabilities first: - [Splunk](https://www.precursorintelligence.com/product/splunk/splunk): 166 vulnerabilities, 288 versions - [Splunk Cloud Platform](https://www.precursorintelligence.com/product/splunk/splunk_cloud_platform): 77 vulnerabilities, 67 versions - [Universal Forwarder](https://www.precursorintelligence.com/product/splunk/universal_forwarder): 61 vulnerabilities, 47 versions - [Cloud](https://www.precursorintelligence.com/product/splunk/cloud): 9 vulnerabilities, 8 versions - [Add-on Builder](https://www.precursorintelligence.com/product/splunk/add-on_builder): 3 vulnerabilities, 4 versions - [Splunk App for Lookup File Editing](https://www.precursorintelligence.com/product/splunk/splunk_app_for_lookup_file_editing): 3 vulnerabilities, 1 version - [Enterprise Security](https://www.precursorintelligence.com/product/splunk/enterprise_security): 2 vulnerabilities, 3 versions - [Software Development Kit](https://www.precursorintelligence.com/product/splunk/software_development_kit): 1 vulnerability, 24 versions - [Cloudconnect Software Development Kit](https://www.precursorintelligence.com/product/splunk/cloudconnect_software_development_kit): 1 vulnerability, 3 versions - [Splunk App for Stream](https://www.precursorintelligence.com/product/splunk/splunk_app_for_stream): 1 vulnerability, 1 version - [Nozzle](https://www.precursorintelligence.com/product/splunk/nozzle): 1 vulnerability, 5 versions - [IT Service Intelligence](https://www.precursorintelligence.com/product/splunk/it_service_intelligence): 1 vulnerability, 7 versions - [SOAR](https://www.precursorintelligence.com/product/splunk/soar): 1 vulnerability, 3 versions ## Questions ### How many vulnerabilities does Splunk have? Our catalogue lists 238 published vulnerabilities across 15 products and 461 versions from Splunk. The most recent Splunk flaw added to the known-exploited list is CVE-2014-0160, on 4 May 2022. ### Which Splunk vulnerabilities are being exploited? 1 Splunk vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2014-0160. The full list is on this page. ### Which Splunk product has the most vulnerabilities? Splunk, with 166 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Splunk vulnerabilities? Create a Precursor Intelligence account and track the Splunk products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Splunk? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact