Splunk has released security updates to address multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure and remote code execution on the targeted system. The vulnerabilities were fixed in Splunk Enterprise 10.2.2, 10.0.5, 9.4.10, 9.3.11, Splunk Cloud Platform 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, 9.3.2411.127 and Splunk MCP Server 1.0.3. Additionally, the company rolled out fixes for bugs in third-party packages in Splunk Enterprise, Operator for Kubernetes Add-on, IT Service Intelligence (ITSI) app, and Universal Forwarder.

More information on vulnerabilities and updates is available in the Splunk security advisories - splunk.com