Filter
Versions
9.0.0
58
8.2.0
42
8.1.0
40
9.1.0
34
9.2.0
24
5.0.1
13
5.0.2
13
6.2.0
13
5.0.3
12
5.0.4
12
6.3.0
12
6.0.0
11
6.1.1
11
6.4.0
11
4.0
10
4.0.1
10
4.0.10
10
4.0.2
10
4.0.3
10
4.0.4
10
4.0.5
10
4.0.6
10
4.0.7
10
4.0.8
10
4.0.9
10
4.1
10
4.1.1
10
5.0.5
10
6.1.2
10
5.0
9
5.0.6
9
5.0.7
9
6.0.1
9
6.0.2
9
6.0.3
9
5.0.8
8
5.0.9
8
6.0.4
8
6.0.5
8
6.1.0
8
6.1.3
8
6.2.1
8
6.2.2
8
6.2.3
8
4.0.11
7
4.1.2
7
6.3.1
7
6.3.2
7
6.3.3
7
6.3.4
7
4.1.3
6
4.1.4
6
4.2
6
4.2.1
6
4.2.2
6
4.2.3
6
4.2.4
6
6.0.6
6
6.1.4
6
6.2.4
6
6.2.5
6
6.3.5
6
6.4.1
6
6.4.2
6
6.5.0
6
5.0.0
5
5.0.10
5
5.0.11
5
5.0.12
5
6.0.7
5
6.0.8
5
6.1
5
6.1.5
5
6.1.6
5
6.1.7
5
6.2.6
5
6.2.7
5
6.2.8
5
6.2.9
5
9.3.0
5
4.1.5
4
4.1.6
4
4.1.7
4
4.1.8
4
5.0.13
4
5.0.14
4
5.0.15
4
6.0.10
4
6.0.11
4
6.0.9
4
6.1.10
4
6.1.8
4
6.1.9
4
6.2.10
4
4.2.5
3
6.0
3
6.3.6
3
6.3.7
3
6.4.3
3
2.1
2
2.2
2
2.2.1
2
2.2.3
2
2.2.6
2
3.0
2
3.0.1
2
3.0.2
2
3.1
2
3.1.1
2
3.1.2
2
3.1.3
2
3.1.4
2
3.2
2
3.2.1
2
3.2.2
2
3.2.3
2
3.2.4
2
3.2.5
2
3.2.6
2
3.3
2
3.3.1
2
3.3.2
2
3.3.3
2
3.3.4
2
3.4
2
3.4.1
2
3.4.10
2
3.4.11
2
3.4.12
2
3.4.13
2
3.4.14
2
3.4.2
2
3.4.3
2
3.4.5
2
3.4.6
2
3.4.8
2
3.4.9
2
4.3
2
4.3.1
2
4.3.2
2
4.3.3
2
4.3.4
2
4.3.5
2
5.0.16
2
6.0.12
2
6.1.11
2
6.2.11
2
6.3.8
2
6.4.4
2
6.5.1
2
4.2.
1
4.3.6
1
4.3.7
1
6.2.12
1
6.4.5
1
6.6.0
1
6.6.11
1
7.0.1
1
8.0
1
8.1
1
9.0.10
1
9.3.1
1
Splunk SplunkSensitive information disclosure in AdminManager logging channel
4.9
First published (updated )
Splunk SplunkSensitive information disclosure in REST_Calls logging channel
4.9
First published (updated )
Splunk SplunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
4.3
First published (updated )
Splunk SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows
8.8
First published (updated )
Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
6.5
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
Splunk SplunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
4.3
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise
5.4
First published (updated )
Splunk SplunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkImproper Access Control for low-privileged user in Splunk Secure Gateway App
4.3
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin
5.4
First published (updated )
Splunk SplunkLow-privileged user could create experimental items
5.4
First published (updated )
Splunk SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint
7.5
First published (updated )
Splunk SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkDenial of Service (DoS) on the datamodel/web REST endpoint
6.5
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Splunk SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages
7.1
First published (updated )
Splunk SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
Splunk SplunkSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise
7.2
EPSS
0.04%
First published (updated )
Splunk SplunkRisky command safeguards bypass in Dashboard Examples Hub
8.1
EPSS
0.04%
First published (updated )
Splunk SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition
8.8
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
Splunk CloudServer Response Disclosure in RapidDiag Salesforce.com Log File
5.3
EPSS
0.05%
First published (updated )
Splunk SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
6.5
EPSS
0.05%
First published (updated )
Splunk SplunkCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
4.8
First published (updated )
Splunk SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.