CVE-2018-11409: Splunk

Medium severity, CVSS 5.3. EPSS: 98.3% chance of exploitation in the next 30 days.

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.

Affected products

• Splunk Splunk: up to and including 7.0.1

Published 2018-06-08. Last modified 2026-06-17.