How many CVEs does Splunk Splunk Cloud Platform have?

Splunk Splunk Cloud Platform has 115 published CVE records since 2022.

How many Splunk Splunk Cloud Platform CVEs are in CISA KEV?

None of Splunk Splunk Cloud Platform's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Splunk Splunk Cloud Platform vulnerabilities?

Yes — 15 of Splunk Splunk Cloud Platform's CVEs have a known public exploit.

Which versions of Splunk Splunk Cloud Platform are affected?

289 distinct Splunk Splunk Cloud Platform versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Splunk Splunk Cloud Platform CVEs?

Splunk Splunk Cloud Platform's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption).

How many critical Splunk Splunk Cloud Platform vulnerabilities are there?

Splunk Splunk Cloud Platform has 1 critical and 46 high-severity CVEs.

What is the average severity of Splunk Splunk Cloud Platform CVEs?

The average CVSS base score across Splunk Splunk Cloud Platform's scored CVEs is 6.5.

Splunk Cloud Platform Vulnerabilities: CVEs, CISA KEV & Security Advisories

Severity and exploitation

How the CVSS severity of Splunk Cloud Platform's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High46

Medium65

Low3

In CISA’s Known Exploited Vulnerabilities catalog

None of Splunk Cloud Platform's CVEs are currently listed in CISA's KEV catalog.

Public exploits

15 of Splunk Cloud Platform's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Splunk Cloud Platform version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 9.0.2209.39 CVEs
9.1.2312 <= v < 9.1.2312.2008 CVEs
< 9.0.2303.1007 CVEs
9.1.2308 <= v < 9.1.2308.2077 CVEs
9.3.2411 <= v < 9.3.2411.1327 CVEs
10.1.2507 <= v < 10.1.2507.236 CVEs
10.2.2510 <= v < 10.2.2510.156 CVEs
< 9.0.22095 CVEs
<= 9.0.2305.1005 CVEs
10.0.2503 <= v < 10.0.2503.135 CVEs
9.2.2406 <= v < 9.2.2406.1195 CVEs

Frequently asked questions

Common questions about Splunk Cloud Platform vulnerabilities.

How many CVEs does Splunk Splunk Cloud Platform have?: Splunk Splunk Cloud Platform has 115 published CVE records since 2022.
How many Splunk Splunk Cloud Platform CVEs are in CISA KEV?: None of Splunk Splunk Cloud Platform's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Splunk Splunk Cloud Platform vulnerabilities?: Yes — 15 of Splunk Splunk Cloud Platform's CVEs have a known public exploit.
Which versions of Splunk Splunk Cloud Platform are affected?: 289 distinct Splunk Splunk Cloud Platform versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Splunk Splunk Cloud Platform CVEs?: Splunk Splunk Cloud Platform's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption).
How many critical Splunk Splunk Cloud Platform vulnerabilities are there?: Splunk Splunk Cloud Platform has 1 critical and 46 high-severity CVEs.
What is the average severity of Splunk Splunk Cloud Platform CVEs?: The average CVSS base score across Splunk Splunk Cloud Platform's scored CVEs is 6.5.

Splunk Cloud Platform Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other Splunk products

Frequently asked questions

References

Track Splunk Cloud Platform vulnerabilities

Fixed in