Splunk Splunk Cloud Platform

Name: Splunk Splunk Cloud Platform
Brand: Splunk

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical13high46medium5low

updated 2026-10-27

vulnerabilities (92)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-20253US	—OT critical	96.9% (100th)	KEV	no fix	2026-06-10	≤ vers:unknown/*
CVE-2023-32707US	high8.8OT high	79.0% (100th)	Exploit	9.0.2303.100	2023-06-01	< 9.0.2303.100
CVE-2026-20251US	—	32.2% (98th)	Exploit	10.2.2510.14	2026-06-10	5 versions
CVE-2023-22941US	high7.5	1.03% (63rd)	Exploit	9.0.2212	2023-02-14	< 9.0.2212
CVE-2025-20384US	—	0.39% (32nd)	Exploit	10.0.2503.6	2025-12-03	4 versions
CVE-2025-20297US	medium5.4	29.3% (98th)	—	9.3.2408.111	2025-06-02	3 versions
CVE-2025-20229US	—	16.0% (97th)	—	9.2.2403.114	2025-03-26	7 versions
CVE-2024-45741US	medium5.4	14.8% (97th)	—	9.1.2312.205	2024-10-14	2 versions
CVE-2026-20139US	—	5.68% (93rd)	—	10.0.2503.9	2026-02-18	4 versions
CVE-2026-20204US	—	3.10% (88th)	—	9.3.2411.127	2026-04-15	6 versions
CVE-2023-22934US	high8.0	1.12% (66th)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2024-36983US	high8.8	1.00% (63rd)	—	9.1.2312.109	2024-07-01	2 versions
CVE-2022-32152US	high7.2	0.96% (61st)	—	8.2.2203	2022-06-15	8.2 → 8.2.2203
CVE-2023-22933US	medium6.1	0.83% (57th)	—	9.0.2209	2023-02-14	< 9.0.2209
CVE-2024-29946US	high8.1	0.77% (56th)	—	9.1.2312.104	2024-03-27	3 versions
CVE-2023-32708US	high8.8	0.75% (55th)	—	9.0.2303.100	2023-06-01	< 9.0.2303.100
CVE-2024-36990US	medium6.5	0.69% (52nd)	—	9.1.2312.202	2024-07-01	3 versions
CVE-2023-32716US	medium6.5	0.62% (50th)	—	9.0.2303.100	2023-06-01	< 9.0.2303.100
CVE-2023-22935US	high8.8	0.61% (49th)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2023-32706US	medium6.5	0.60% (49th)	—	9.0.2303.100	2023-06-01	9.0.2303 and below → 9.0.2303.100
CVE-2023-22939US	high8.8	0.59% (48th)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2026-20297US	—	0.57% (47th)	—	10.5.2605.0	2026-07-15	5 versions
CVE-2024-36997US	high8.1	0.55% (46th)	—	9.1.2312.100	2024-07-01	9.1.2312 → 9.1.2312.100
CVE-2024-45736US	medium6.5	0.54% (45th)	—	9.1.2312.111	2024-10-14	3 versions
CVE-2025-20231US	medium5.7	0.53% (45th)	—	no fix	2025-03-26	3 versions
CVE-2022-37438US	low3.5	0.52% (44th)	—	9.0.2205	2022-08-16	unspecified → 9.0.2205
CVE-2024-36982US	high7.5	0.50% (42nd)	—	9.1.2308.207	2024-07-01	2 versions
CVE-2025-20387US	medium6.5	0.49% (42nd)	—	no fix	2025-12-03	≤ vers:unknown/*
CVE-2025-20386US	medium6.5	0.49% (42nd)	—	no fix	2025-12-03	≤ vers:unknown/*
CVE-2026-20239US	medium6.5	0.48% (42nd)	—	10.1.2507.21	2026-05-20	4 versions
CVE-2025-20232US	—	0.48% (41st)	—	9.3.2408.103	2025-03-26	8 versions
CVE-2025-20226US	—	0.48% (41st)	—	9.3.2408.107	2025-03-26	6 versions
CVE-2026-20163US	—	0.48% (41st)	—	10.2.2510.5	2026-03-11	4 versions
CVE-2024-53244US	medium5.7	0.47% (40th)	—	9.1.2312.206	2024-12-10	3 versions
CVE-2025-20371US	high8.8	0.47% (40th)	—	9.3.2411.109	2025-10-01	3 versions
CVE-2025-20366US	—	0.45% (39th)	—	9.3.2411.111	2025-10-01	3 versions
CVE-2023-32710US	medium5.3	0.44% (38th)	—	9.0.2303.100	2023-06-01	< 9.0.2303.100
CVE-2023-22940US	medium5.7	0.43% (37th)	—	9.0.2212	2023-02-14	< 9.0.2212
CVE-2025-20227US	medium4.3	0.43% (37th)	—	9.2.2406.113	2025-03-26	8 versions
CVE-2025-20389US	medium6.5	0.41% (36th)	—	9.3.2411.120	2025-12-03	4 versions
CVE-2023-22937US	medium4.3	0.41% (35th)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2026-20254US	—	0.41% (35th)	—	10.2.2510.15	2026-06-10	5 versions
CVE-2023-22932US	medium6.1	0.40% (34th)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2026-20240US	—	0.40% (34th)	—	10.3.2512.9	2026-05-20	6 versions
CVE-2024-36986US	medium5.7	0.39% (33rd)	—	9.1.2312.200	2024-07-01	2 versions
CVE-2023-32709US	medium4.3	0.39% (33rd)	—	9.0.2303.100	2023-06-01	< 9.0.2303.100
CVE-2024-45732US	medium6.5OT elevated	0.39% (33rd)	—	9.2.2403.103	2024-10-14	3 versions
CVE-2025-20325US	medium5.3	0.39% (32nd)	—	9.3.2411.103	2025-07-07	3 versions
CVE-2023-22936US	medium6.3	0.38% (31st)	—	9.0.2209.3	2023-02-14	< 9.0.2209.3
CVE-2024-36993US	medium5.4	0.37% (31st)	—	9.1.2308.207	2024-07-01	2 versions

showing 50 of 92

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor14 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14 CVEs
CWE-20Improper Input Validation13 CVEs
CWE-284Improper Access Control8 CVEs
CWE-285Improper Authorization5 CVEs
CWE-532Insertion of Sensitive Information into Log File4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)86 CVEs
NLNCSC-NL (CSAF)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan