How many Splunk Splunk Enterprise Cloud CVEs are in CISA KEV?

None of Splunk Splunk Enterprise Cloud's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Splunk Splunk Enterprise Cloud are affected?

20 distinct Splunk Splunk Enterprise Cloud versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Splunk Splunk Enterprise Cloud CVEs?

Splunk Splunk Enterprise Cloud's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-284 (Improper Access Control), CWE-35 (Path Traversal: '.../...//'), CWE-400 (Uncontrolled Resource Consumption).

What is the average severity of Splunk Splunk Enterprise Cloud CVEs?

The average CVSS base score across Splunk Splunk Enterprise Cloud's scored CVEs is 5.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Splunk

5 CVEs

Splunk Enterprise Cloud Vulnerabilities

Name: Splunk Enterprise Cloud vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Splunk Enterprise Cloud by Splunk.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.7

Avg CVSS

2025–2025

Last updated October 1, 2025

Overview

Splunk Enterprise Cloud has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Splunk Enterprise Cloud, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Splunk Enterprise Cloud's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Splunk Enterprise Cloud's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Splunk Enterprise Cloud CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Splunk Enterprise Cloud version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

9.2.2406 <= v < 9.2.2406.1193 CVEs
9.3.2411 <= v < 9.3.2411.1043 CVEs
9.3.2408 <= v < 9.3.2408.1132 CVEs
9.2.2406 <= v < 9.2.2406.1211 CVE
9.2.2406 <= v < 9.2.2406.1231 CVE
9.3.2408 <= v < 9.3.2408.1141 CVE
9.3.2408 <= v < 9.3.2408.1171 CVE
9.3.2408 <= v < 9.3.2408.1181 CVE
9.3.2411 <= v < 9.3.2411.1071 CVE
9.3.2411 <= v < 9.3.2411.1081 CVE

Fixed in

9.2.2406.1193 CVEs
9.3.2411.1043 CVEs
9.3.2408.1132 CVEs
9.2.2406.1211 CVE
9.2.2406.1231 CVE
9.3.2408.1141 CVE
9.3.2408.1171 CVE
9.3.2408.1181 CVE
9.3.2411.1071 CVE
9.3.2411.1081 CVE

Find a version

5 CVEs

Sort

Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise
CVE-2025-20370
Patch
CWE-400
Medium · CVSS 4.9
EPSS 0.5% (41th pct)2025-10-01
Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise
CVE-2025-20322
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2025-07-07
Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
CVE-2025-20321
Patch
CWE-352
Medium · CVSS 6.5
EPSS 0.2% (6th pct)2025-07-07
Improper Access Control in System Source Types Configuration in Splunk Enterprise
CVE-2025-20324
Patch
CWE-284
Medium · CVSS 5.4
EPSS 0.2% (13th pct)2025-07-07
Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise
CVE-2025-20320
Patch
CWE-35
High · CVSS 7.3
EPSS 0.4% (29th pct)2025-07-07

Common weakness types

The CWE weakness categories most often found in Splunk Enterprise Cloud CVEs. Follow any weakness for its full explanation.

Other Splunk products

Browse vulnerabilities for other products by Splunk.

splunk201 CVEs Splunk Enterprise161 CVEs Splunk Cloud Platform115 CVEs universal forwarder63 CVEs Splunk Cloud11 CVEs cloud10 CVEs Splunk Secure Gateway8 CVEs Splunk Light4 CVEs

All Splunk vulnerabilities

Frequently asked questions

Common questions about Splunk Enterprise Cloud vulnerabilities.

How many CVEs does Splunk Splunk Enterprise Cloud have?: Splunk Splunk Enterprise Cloud has 5 published CVE records since 2025.
How many Splunk Splunk Enterprise Cloud CVEs are in CISA KEV?: None of Splunk Splunk Enterprise Cloud's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Splunk Splunk Enterprise Cloud vulnerabilities?: No Splunk Splunk Enterprise Cloud CVEs currently have a tracked public exploit in this dataset.
Which versions of Splunk Splunk Enterprise Cloud are affected?: 20 distinct Splunk Splunk Enterprise Cloud versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Splunk Splunk Enterprise Cloud CVEs?: Splunk Splunk Enterprise Cloud's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-284 (Improper Access Control), CWE-35 (Path Traversal: '.../...//'), CWE-400 (Uncontrolled Resource Consumption).
What is the average severity of Splunk Splunk Enterprise Cloud CVEs?: The average CVSS base score across Splunk Splunk Enterprise Cloud's scored CVEs is 5.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Splunk Enterprise Cloud vulnerabilities

Monitor new Splunk Enterprise Cloud vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing