CVEFinder.io

CVE-2026-20255

🔶 medium
🔍 Scan for this CVE
Summary

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious classic dashboard that exfiltrates sensitive data to an external server. The vulnerability exists because URL validation on the external content dialog is incomplete, which can allow for requests to untrusted domains when a

Description

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious classic dashboard that exfiltrates sensitive data to an external server.

The vulnerability exists because URL validation on the external content dialog is incomplete, which can allow for requests to untrusted domains when a user interacts with a crafted dashboard.

CVSS Score
5.7
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-06-10
First Seen: 2026-06-11
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 32.7% of all 338,292 vulnerabilities in our database.

#227,662
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jun 10, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Tony Tong (tongster)
SSVC data provided by CISA
Last Modified 2026-06-15
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-20

📦 Affected Products 8

Vendor Product Status Affected Versions
splunk splunk Affected
> 10.0.0 < 10.0.7
splunk splunk Affected
> 10.2.0 < 10.2.4
splunk splunk Affected
> 9.3.0 < 9.3.13
splunk splunk Affected
> 9.4.0 < 9.4.12
splunk splunk_cloud_platform Affected
> 10.1.2507 < 10.1.2507.23
splunk splunk_cloud_platform Affected
> 10.2.2510 < 10.2.2510.15
splunk splunk_cloud_platform Affected
> 10.3.2512 < 10.3.2512.13
splunk splunk_cloud_platform Affected
> 9.3.2411 < 9.3.2411.132

🔗 References 1

https://advisory.splunk.com/advisories/SVD-2026-0605
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-20296 ⚠️ high 8.3 0.2 In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26... 2026-07-15
CVE-2026-20297 ⚠️ high 7.2 0.5 In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below... 2026-07-15
CVE-2026-20298 🔶 medium 5.3 0.2 In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26... 2026-07-15
CVE-2026-20251 ⚠️ high 8.8 0.6 In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.1... 2026-06-10
CVE-2026-20252 ⚠️ high 7.6 0.3 In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.26... 2026-06-10
CVE-2026-20253 ⛔ critical 9.8 96.2 In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or tr... 2026-06-10
These CVEs affect the same products