Splunk 安全漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://advisory.splunk.com/
• https://advisory.splunk.com/advisories
• https://www.hkcert.org/tc/security-bulletin/splunk-products-multiple-vulnerabilities_20251204
• https://nic.seu.edu.cn/info/1047/1172.htm
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/1241/
• https://news.qq.com/rain/a/20260416A06YVQ00
• https://www.anquanke.com/post/id/298092
• https://blog.csdn.net/qq_29607687/article/details/140239095
• https://cve.imfht.com/vendor/Splunk
• https://advisory.splunk.com/advisories/SVD-2026-0403
• https://zeropath.com/blog/cve-2025-20371-splunk-blind-ssrf-summary
• https://www.securityweek.com/splunk-enterprise-update-patches-code-execution-vulnerability/
• https://app.opencve.io/cve/?vendor=splunk
• https://nvd.nist.gov/vuln/detail/CVE-2025-20371
• https://www.upguard.com/news/splunk-enterprise-vulnerabilities-cve-2025-20386-and-cve-2025-20387

Related Vulnerabilities

• PoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File Upload
• PoCCVE-2018-11409: Splunk <=7.0.1 - Information Disclosure
• PoCCVE-2024-36991: Splunk Enterprise - Local File Inclusion
• PoCsplunk-default-login: Splunk - Default Password
• PoCsplunk-enterprise-log4j-rce: Splunk Enterprise - Remote Code Execution (Apache Log4j)
• Splunk Cloud Platform和Splunk Enterprise 信息泄露漏洞
• Splunk Cloud Platform和Splunk Enterprise 跨站请求伪造漏洞
• Splunk Cloud Platform和Splunk Enterprise 日志信息泄露漏洞
• Splunk Enterprise 需授权 反序列化漏洞 可导致远程代码执行
• Splunk Enterprise 需授权 路径遍历漏洞 可导致远程代码执行
• Splunk Enterprise 需授权 权限管理不当漏洞 可导致敏感信息泄露
• Splunk Enterprise CVE-2024-36991 目录遍历漏洞