FEDRAMP CATALOG › Splunk Cloud Platform for FedRAMP Moderate
Splunk Cloud Platform for FedRAMP Moderate
Splunk · package F1607197917
Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
10 critical
1 high
1 on KEV
· 11 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Commerce | Agency | 2022-08-17 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| CRITICAL | CVE-2026-76285 | CVE-2026-76285: Improper Adherence to Coding Standards. Splunk addressed multiple internally ide |
| CRITICAL | CVE-2026-76310 | CVE-2026-76310: In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unaut |
| CRITICAL | CVE-2026-76311 | CVE-2026-76311: In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unaut |
| CRITICAL | CVE-2026-76312 | CVE-2026-76312: In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unaut |
| HIGH | CVE-2026-20253 | Splunk Enterprise Missing Authentication for Critical Function Vulnerability |
| CRITICAL | CVE-2023-23914 | CVE-2023-23914: A cleartext transmission of sensitive information vulnerability exists in curl < |
| CRITICAL | CVE-2022-32221 | CVE-2022-32221: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (` |
| CRITICAL | CVE-2022-36227 | CVE-2022-36227: In libarchive before 3.6.2, the software does not check for an error after calli |
| CRITICAL | CVE-2022-32207 | CVE-2022-32207: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes |
| CRITICAL | CVE-2021-22945 | CVE-2021-22945: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some |
| CRITICAL | CVE-2021-3520 | CVE-2021-3520: There's a flaw in lz4. An attacker who submits a crafted file to an application |