Splunk Splunk Cloud

Name: Splunk Splunk Cloud
Brand: Splunk

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical6high4medium1low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-46214US	high8.8	89.2% (100th)	Exploit	9.1.2308	2023-11-16	< 9.1.2308
CVE-2023-40595US	high8.8	0.90% (60th)	—	9.0.2305.200	2023-08-30	< 9.0.2305.200
CVE-2023-40598US	high8.8OT elevated	0.85% (58th)	—	9.0.2305.200	2023-08-30	< 9.0.2305.200
CVE-2023-40593US	high7.5	0.58% (48th)	—	9.0.2205	2023-08-30	< 9.0.2205
CVE-2023-40592US	medium6.1	0.57% (47th)	—	9.0.2305.200	2023-08-30	< 9.0.2305.200
CVE-2023-46213US	medium4.8	0.47% (41st)	—	9.1.2308	2023-11-16	< 9.1.2308
CVE-2023-40594US	high7.5	0.40% (34th)	—	9.0.2303.100	2023-08-30	< 9.0.2303.100
CVE-2024-23677US	medium5.3	0.40% (34th)	—	9.0.2208	2024-01-22	2 versions
CVE-2024-23675US	medium6.5OT elevated	0.38% (32nd)	—	9.1.2312.100	2024-01-22	2 versions
CVE-2024-23676US	low3.5	0.32% (25th)	—	9.1.2308.200	2024-01-22	2 versions
CVE-2023-40597US	high8.8	0.23% (14th)	—	9.0.2305.200	2023-08-30	< 9.0.2305.200

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-36Absolute Path Traversal1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.