CVE-2026-20239
Sensitive Information Disclosure through Log Files in Splunk Enterprise
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
| CWE | CWE-532 |
| Vendor | splunk |
| Product | splunk enterprise |
| Published | May 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for splunk splunk enterprise
Be the first to know when new high vulnerabilities affecting splunk splunk enterprise are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Splunk / Splunk Enterprise
10.2 < 10.2.2 10.0 < 10.0.5
Splunk / Splunk Cloud Platform
10.3.2512 < 10.3.2512.8 10.2.2510 < 10.2.2510.11 10.1.2507 < 10.1.2507.21 10.0.2503 < 10.0.2503.13
References
Credits
Charlie Huggard, Splunk