Splunk Ad LDAP App For Splunk Soar vulnerabilities

3 CVEs affecting Splunk Ad LDAP App For Splunk Soar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76375, published 2026-08-19.

More from Splunk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-76375, published 2026-08-19. Medium severity, CVSS 5.0. EPSS: 0.3% chance of exploitation in the next 30 days. In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full…
• CVE-2026-76374, published 2026-08-19. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent…
• CVE-2026-76373, published 2026-08-19. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active…