Splunk Splunk Cloud Platform vulnerabilities
109 published vulnerabilities in Splunk Splunk Cloud Platform. The most were published in 2025 (26), and 24 so far in 2026.
Splunk Splunk Cloud Platform vulnerabilities by year
2022
2023
2024
2025
2026
Most exploited Splunk Splunk Cloud Platform vulnerabilities
- CVE-2026-20251 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway
- CVE-2023-40595 Remote Code Execution via Serialized Session Payload
- CVE-2023-32707 ‘edit_user’ Capability Privilege Escalation
- CVE-2022-43567 Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature
- CVE-2022-43568 Reflected Cross-Site Scripting via the radio template in Splunk Enterprise
- CVE-2022-43570 XML External Entity Injection through a custom View in Splunk Enterprise
- CVE-2022-43571 Remote Code Execution through dashboard PDF generation component in Splunk Enterprise
- CVE-2023-40598 Command Injection in Splunk Enterprise Using External Lookups
- CVE-2023-40592 Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint
- CVE-2026-20296 SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
- CVE-2023-22935 SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
- CVE-2023-22939 SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.