Latest vulnerabilities for "splunk"

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Risk 37

Severity

6.5

First published (updated )

CVE-2025-20228

Splunk Cloud PlatformInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Risk 22

Severity

4.3

First published (updated )

CVE-2025-20227

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Risk 33

Severity

5.7

First published (updated )

CVE-2024-53244

Splunk Splunk Cloud PlatformSensitive Information Disclosure through SPL commands

Risk 43

Severity

7.5

First published (updated )

CVE-2024-53246

Splunk Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User

Risk 22

Severity

4.3

First published (updated )

CVE-2024-53245

Splunk splunkSensitive information disclosure in AdminManager logging channel

Risk 30

Severity

4.9

First published (updated )

CVE-2024-45739

Splunk splunkSensitive information disclosure in REST_Calls logging channel

Risk 30

Severity

4.9

First published (updated )

CVE-2024-45738

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45737

Splunk splunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

Risk 79

Severity

8.8

First published (updated )

CVE-2024-45733

Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Risk 48

Severity

7.1

First published (updated )

CVE-2024-45732

Splunk splunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Risk 38

Severity

6.5

First published (updated )

CVE-2024-45736

Splunk splunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2024-45741

Splunk splunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45734

Splunk splunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Risk 34

Severity

5.4

First published (updated )

CVE-2024-45740

Splunk splunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

Risk 67

Severity

8

First published (updated )

CVE-2024-45731

Splunk splunkImproper Access Control for low-privileged user in Splunk Secure Gateway App

Risk 22

Severity

4.3

First published (updated )

CVE-2024-45735

Splunk splunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

Risk 54

Severity

8.1

First published (updated )

CVE-2024-36997

Splunk splunkPersistent Cross-site Scripting (XSS) in Web Bulletin

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36993

Splunk splunkLow-privileged user could create experimental items

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36995

Splunk splunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

Risk 43

Severity

7.5

First published (updated )

CVE-2024-36982

Splunk splunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

Risk 43

Severity

7.5

First published (updated )

CVE-2024-36991

Splunk splunkDenial of Service (DoS) on the datamodel/web REST endpoint

Risk 38

Severity

6.5

First published (updated )

CVE-2024-36990

Splunk splunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

Risk 79

Severity

8.8

First published (updated )

CVE-2024-36985

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36992

Splunk splunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows

Risk 79

Severity

8.8

First published (updated )

CVE-2024-36984

Splunk splunkRisky command safeguards bypass through Search ID query in Analytics Workspace

Risk 43

Severity

6.3

First published (updated )

CVE-2024-36986

Splunk splunkCommand Injection using External Lookups

Risk 79

Severity

8.8

First published (updated )

CVE-2024-36983

Splunk splunkInformation Disclosure of user names

Risk 27

Severity

5.3

First published (updated )

CVE-2024-36996

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Risk 34

Severity

5.4

First published (updated )

CVE-2024-36994

Splunk splunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

Risk 48

Severity

7.1

First published (updated )

CVE-2024-36989

Trending

Versions

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Splunk Cloud PlatformInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Splunk Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Splunk Splunk Cloud PlatformSensitive Information Disclosure through SPL commands

Splunk Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User

Don't miss critical vulnerabilities

Splunk splunkSensitive information disclosure in AdminManager logging channel

Splunk splunkSensitive information disclosure in REST_Calls logging channel

Splunk splunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Splunk splunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Don't miss critical vulnerabilities

Splunk splunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Splunk splunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Splunk splunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

Splunk splunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Splunk splunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

Don't miss critical vulnerabilities

Splunk splunkImproper Access Control for low-privileged user in Splunk Secure Gateway App

Splunk splunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

Splunk splunkPersistent Cross-site Scripting (XSS) in Web Bulletin

Splunk splunkLow-privileged user could create experimental items

Splunk splunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

Don't miss critical vulnerabilities

Splunk splunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

Splunk splunkDenial of Service (DoS) on the datamodel/web REST endpoint

Splunk splunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Splunk splunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows

Don't miss critical vulnerabilities

Splunk splunkRisky command safeguards bypass through Search ID query in Analytics Workspace

Splunk splunkCommand Injection using External Lookups

Splunk splunkInformation Disclosure of user names

Splunk splunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

Splunk splunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

Don't miss critical vulnerabilities

Company

Resources

Contact