Splunk developers has released security updates to address multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution, sensitive information disclosure, cross-site scripting, denial of service condition and security restriction bypass on the targeted system. The vulnerabilities were fixed in Splunk Enterprise 10.4.2, 10.2.6, 10.0.9 and 9.4.14.

More information on vulnerabilities and updates is available in the Splunk security advisories - splunk.com