Filters
Versions
9.0.0
24
9.1.0
19
8.1.0
16
9.2.0
16
8.2.0
15
6.2.0
10
5.0.1
9
5.0.2
9
6.1.1
9
6.3.0
9
5.0.3
8
5.0.4
8
5.0.5
8
6.1.2
8
6.4.0
8
4.0
7
4.0.1
7
4.0.10
7
4.0.2
7
4.0.3
7
4.0.4
7
4.0.5
7
4.0.6
7
4.0.7
7
4.0.8
7
4.0.9
7
4.1
7
4.1.1
7
5.0.6
7
5.0.7
7
6.0.0
7
6.1.0
7
6.2.1
7
6.2.2
7
6.2.3
7
5.0.8
6
5.0.9
6
6.0.1
6
6.0.2
6
6.0.3
6
6.0.4
6
6.0.5
6
6.1.3
6
6.3.1
6
6.3.2
6
6.3.3
6
6.3.4
6
4.0.11
5
4.1.2
5
4.2
5
4.2.1
5
4.2.2
5
4.2.3
5
4.2.4
5
5.0
5
6.0.6
5
6.1.4
5
6.2.4
5
6.2.5
5
6.3.5
5
6.4.1
5
6.4.2
5
6.5.0
5
4.1.3
4
4.1.4
4
5.0.0
4
5.0.10
4
5.0.11
4
5.0.12
4
6.0.7
4
6.0.8
4
6.1
4
6.1.5
4
6.1.6
4
6.1.7
4
6.2.6
4
6.2.7
4
6.2.8
4
6.2.9
4
4.1.5
3
4.1.6
3
4.1.7
3
4.1.8
3
5.0.13
3
5.0.14
3
5.0.15
3
6.0.10
3
6.0.11
3
6.0.9
3
6.1.10
3
6.1.8
3
6.1.9
3
6.2.10
3
9.3.0
3
4.2.5
2
4.3
2
4.3.1
2
4.3.2
2
4.3.3
2
4.3.4
2
4.3.5
2
6.0
2
6.3.6
2
6.3.7
2
6.3.8
2
6.4.3
2
6.4.4
2
6.5.1
2
2.1
1
2.2
1
2.2.1
1
2.2.3
1
2.2.6
1
3.0
1
3.0.1
1
3.0.2
1
3.1
1
3.1.1
1
3.1.2
1
3.1.3
1
3.1.4
1
3.2
1
3.2.1
1
3.2.2
1
3.2.3
1
3.2.4
1
3.2.5
1
3.2.6
1
3.3
1
3.3.1
1
3.3.2
1
3.3.3
1
3.3.4
1
3.4
1
3.4.1
1
3.4.10
1
3.4.11
1
3.4.12
1
3.4.13
1
3.4.14
1
3.4.2
1
3.4.3
1
3.4.5
1
3.4.6
1
3.4.8
1
3.4.9
1
4.2.
1
4.3.6
1
4.3.7
1
5.0.16
1
6.0.12
1
6.1.11
1
6.2.11
1
6.2.12
1
6.4.5
1
7.0.1
1
9.0.10
1
9.3.1
1
Splunk SplunkSensitive information disclosure in AdminManager logging channel
4.9
First published (updated )
Splunk SplunkSensitive information disclosure in REST_Calls logging channel
4.9
First published (updated )
Splunk SplunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
4.3
First published (updated )
Splunk SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
6.5
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
4.3
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise
5.4
First published (updated )
Splunk SplunkImproper Access Control for low-privileged user in Splunk Secure Gateway App
4.3
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin
5.4
First published (updated )
Splunk SplunkLow-privileged user could create experimental items
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkDenial of Service (DoS) on the datamodel/web REST endpoint
6.5
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Splunk SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
Splunk SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
Splunk CloudServer Response Disclosure in RapidDiag Salesforce.com Log File
5.3
EPSS
0.05%
First published (updated )
Splunk SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
6.5
EPSS
0.05%
First published (updated )
Splunk SplunkCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkLow-privileged User can View Hashed Default Splunk Password
4.3
First published (updated )
Splunk SplunkDenial of Service via the 'dump' SPL command
6.5
First published (updated )
Splunk SplunkRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results
4.3
First published (updated )
Splunk SplunkInformation Disclosure via the ‘copyresults’ SPL Command
5.3
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
4.3
First published (updated )
Splunk SplunkUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise
4.3
First published (updated )
Splunk SplunkCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise
5.4
First published (updated )
Splunk SplunkAuthenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise
6.3
First published (updated )
Splunk Splunk‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise
6.3
First published (updated )
Splunk SplunkDenial of Service in Splunk Enterprise through search macros
6.5
First published (updated )
Splunk SplunkHost Header Injection in Splunk Enterprise
5.4
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise
6.4
First published (updated )
Splunk SplunkMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkUsername enumeration through lockout message in REST API
5.3
First published (updated )
Splunk SplunkSplunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.