📦

splunk

Vendor: splunk

Login to add this product to WatchStack
Actively Exploited 2 CISA KEV List
PoC / Exploits 13 Code Available
Total RCEs 21 Remote Access
Total CVEs 469 Total Indexed
Avg. EPSS 3.97% Exploit Prob.
Latest CVE CVE-2026-20259 Jun 10

Security Vulnerability Index

Page 21 / 47
7.5 CVSS
CVE-2010-2502

Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via redirects, aka SPL-31067.

EPSS: 2.64%
4.3 CVSS
CVE-2010-2429

Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.

EPSS: 1.64%