[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxMUjMToAOQ8j70SJzXSWgvXtPg0q5SvHfuKbKUUjZM4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":88,"kevVulnerabilities":147,"topProductsByCves":153,"seoMetadata":164,"meta":173},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":87},30062,"splunk",15,238,1,461,"2025-10-01","s",[16,20,26,32,38,44,48,52,56,61,65,69,73,78,83],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},156593,288,166,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":25,"last_cve_update":13},156596,"splunk_cloud_platform",67,77,0,{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":25,"last_cve_update":31},156598,"universal_forwarder",47,61,"2025-06-02",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":25,"last_cve_update":37},156585,"cloud",8,9,"2024-07-01",{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":25,"last_cve_update":43},156584,"add-on_builder",4,3,"2024-01-30",{"id":45,"product_name":46,"version_count":11,"cve_count":42,"kev_count":25,"last_cve_update":47},156594,"splunk_app_for_lookup_file_editing","2025-03-26",{"id":49,"product_name":50,"version_count":25,"cve_count":51,"kev_count":25,"last_cve_update":47},156597,"splunk_secure_gateway",2,{"id":53,"product_name":54,"version_count":42,"cve_count":51,"kev_count":25,"last_cve_update":55},156587,"enterprise_security","2024-01-09",{"id":57,"product_name":58,"version_count":59,"cve_count":11,"kev_count":25,"last_cve_update":60},156592,"software_development_kit",24,"2019-03-21",{"id":62,"product_name":63,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":64},156588,"hadoop_connect","2017-04-06",{"id":66,"product_name":67,"version_count":42,"cve_count":11,"kev_count":25,"last_cve_update":68},156586,"cloudconnect_software_development_kit","2023-02-14",{"id":70,"product_name":71,"version_count":11,"cve_count":11,"kev_count":25,"last_cve_update":72},156595,"splunk_app_for_stream","2023-06-01",{"id":74,"product_name":75,"version_count":76,"cve_count":11,"kev_count":25,"last_cve_update":77},156590,"nozzle",5,"2019-08-05",{"id":79,"product_name":80,"version_count":81,"cve_count":11,"kev_count":25,"last_cve_update":82},156589,"it_service_intelligence",7,"2023-08-30",{"id":84,"product_name":85,"version_count":42,"cve_count":11,"kev_count":25,"last_cve_update":86},156591,"soar","2023-07-31","Splunk is a technology vendor with 15 tracked products and 238 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[89,97,106,112,116,122,126,132,138,143],{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":94,"severity":95,"isKev":4,"epssScore":96},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"v3.1","High",0.99999,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":102,"severity":103,"isKev":104,"epssScore":105},"CVE-2018-11409","Splunk through 7.0.1 allows information disclosure by appending __raw\u002Fservices\u002Fserver\u002Finfo\u002Fserver-info?output_mode=json to a query, as demonstrated by discovering a license key.","2018-06-08",5.3,"v3.0","Medium",false,0.98221,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":94,"severity":95,"isKev":104,"epssScore":111},"CVE-2023-46214","In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance.","2023-11-16",8.8,0.89174,{"cveId":113,"description":114,"publishedDate":72,"cvssScore":110,"cvssVersion":94,"severity":95,"isKev":104,"epssScore":115},"CVE-2023-32707","In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted web requests.",0.79019,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":94,"severity":95,"isKev":104,"epssScore":121},"CVE-2021-22901","curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP\u002F1.1 connection or multiplexed HTTP\u002F2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory.","2021-06-11",8.1,0.63531,{"cveId":123,"description":124,"publishedDate":72,"cvssScore":120,"cvssVersion":94,"severity":95,"isKev":104,"epssScore":125},"CVE-2023-32714","In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory.",0.42824,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"cvssVersion":94,"severity":103,"isKev":104,"epssScore":131},"CVE-2022-43568","In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.\n","2022-11-04",6.1,0.42801,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"cvssVersion":94,"severity":103,"isKev":104,"epssScore":137},"CVE-2022-32206","curl \u003C 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.","2022-07-07",6.5,0.36348,{"cveId":139,"description":140,"publishedDate":135,"cvssScore":141,"cvssVersion":94,"severity":103,"isKev":104,"epssScore":142},"CVE-2022-32205","A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl \u003C 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a \"sister server\" to effectively cause a denial of service for a sibling site on the same second level domain using this method.",4.3,0.31497,{"cveId":144,"description":145,"publishedDate":31,"cvssScore":141,"cvssVersion":94,"severity":103,"isKev":104,"epssScore":146},"CVE-2025-20297","In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the \"admin\" or \"power\" Splunk roles could craft a malicious payload through the pdfgen\u002Frender REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.",0.29302,[148],{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":94,"severity":95,"isKev":4,"epssScore":96,"cisaVulnName":149,"cisaDateAdded":150,"cisaShortDescription":151,"cisaRequiredAction":152},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.","Apply updates per vendor instructions.",[154,155,156,157,158,159,160,161,162,163],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":25,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":25,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":25,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":25,"last_cve_update":43},{"id":45,"product_name":46,"version_count":11,"cve_count":42,"kev_count":25,"last_cve_update":47},{"id":49,"product_name":50,"version_count":25,"cve_count":51,"kev_count":25,"last_cve_update":47},{"id":53,"product_name":54,"version_count":42,"cve_count":51,"kev_count":25,"last_cve_update":55},{"id":57,"product_name":58,"version_count":59,"cve_count":11,"kev_count":25,"last_cve_update":60},{"id":62,"product_name":63,"version_count":25,"cve_count":11,"kev_count":25,"last_cve_update":64},{"title":165,"metaDescription":166,"keywords":167,"structuredData":168},"Splunk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Splunk covering 15 products with 238 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Splunk vulnerabilities, Splunk security, Splunk CVE, Splunk threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Splunk KEV, Splunk exploited vulnerabilities",{"@context":169,"@type":170,"name":171,"description":166,"url":172},"https:\u002F\u002Fschema.org","Organization","Splunk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsplunk",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":174,"apiVersion":175},"2026-10-17T00:10:46.808Z","3.0"]