Splunk · Splunk Cloud Platform · CVE-2026-20239
**Name of the Vulnerable Software and Affected Versions**
Splunk Enterprise versions prior to 10.2.2
Splunk Enterprise versions prior to 10.0.5
Splunk Cloud Platform versions prior to 10.3.2512.8
Splunk Cloud Platform versions prior to 10.2.2510.11
Splunk Cloud Platform versions prior to 10.1.2507.21
Splunk Cloud Platform versions prior to 10.0.2503.13
**Description**
A user assigned a role with access to the ` internal` index can view session cookies and response bodies containing sensitive data.
**Recommendations**
Update Splunk Enterprise to version 10.2.2 or later.
Update Splunk Enterprise to version 10.0.5 or later.
Update Splunk Cloud Platform to version 10.3.2512.8 or later.
Update Splunk Cloud Platform to version 10.2.2510.11 or later.
Update Splunk Cloud Platform to version 10.1.2507.21 or later.
Update Splunk Cloud Platform to version 10.0.2503.13 or later.
Restrict access to the ` internal` index to minimize the risk of sensitive data exposure.