Filter

Splunk SplunkSplunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x…

First published (updated )

Splunk SplunkSplunk Enterprise deployment servers allow client publishing of forwarder bundles

First published (updated )

Splunk SplunkRemote Code Execution via Serialized Session Payload

First published (updated )

Splunk SplunkCVE-2017-17067

First published (updated )

Splunk SplunkIngest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkPath Traversal

First published (updated )

Splunk SplunkSplunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functiona…

First published (updated )

Splunk SplunkSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default

First published (updated )

Splunk SplunkCode Injection

First published (updated )

Splunk SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkCommand Injection in Splunk Enterprise Using External Lookups

8.8
First published (updated )

Splunk SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

8.8
EPSS
0.05%
First published (updated )

Splunk SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

8.8
First published (updated )

Splunk SplunkHTTP Response Splitting via the ‘rest’ SPL Command

8.8
First published (updated )

Splunk Splunk‘edit_user’ Capability Privilege Escalation

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkXEE

8.8
First published (updated )

Splunk SplunkPath Traversal in search parameter results in external content injection

8.8
First published (updated )

Splunk SplunkLocal privilege escalation via a default path in Splunk Enterprise Windows

8.8
First published (updated )

Splunk SplunkReflected XSS in a query parameter of the Monitoring Console

8.8
First published (updated )

Splunk SplunkRisky command safeguards bypass via rex search command field names in Splunk Enterprise

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkRisky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkRemote Code Execution through dashboard PDF generation component in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkReflected Cross-Site Scripting via the radio template in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkXML External Entity Injection through a custom View in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

8.8
First published (updated )

Splunk SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py

8.8
First published (updated )

Splunk SplunkPersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise

8.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203