Filter
AND
-Infinity
0
Trending
Versions
9.0.0
24
9.1.0
21
9.2.0
18
8.1.0
16
8.2.0
15
5.0.1
9
5.0.2
9
6.1.1
9
6.2.0
9
5.0.3
8
5.0.4
8
5.0.5
8
6.1.2
8
6.3.0
8
4.0
7
4.0.1
7
4.0.10
7
4.0.2
7
4.0.3
7
4.0.4
7
4.0.5
7
4.0.6
7
4.0.7
7
4.0.8
7
4.0.9
7
4.1
7
4.1.1
7
6.4.0
7
5.0.6
6
5.0.7
6
6.0.0
6
6.1.0
6
6.2.1
6
6.2.2
6
6.2.3
6
4.0.11
5
4.1.2
5
5.0.8
5
5.0.9
5
6.0.1
5
6.0.2
5
6.0.3
5
6.0.4
5
6.0.5
5
6.1.3
5
6.2.4
5
6.2.5
5
6.3.1
5
6.3.2
5
6.3.3
5
Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter
5.7
First published (updated )
Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User
4.3
First published (updated )
SplunkSensitive information disclosure in AdminManager logging channel
4.9
First published (updated )
SplunkSensitive information disclosure in REST_Calls logging channel
4.9
First published (updated )
SplunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
6.5
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
SplunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
4.3
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise
5.4
First published (updated )
SplunkImproper Access Control for low-privileged user in Splunk Secure Gateway App
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin
5.4
First published (updated )
SplunkLow-privileged user could create experimental items
5.4
First published (updated )
SplunkDenial of Service (DoS) on the datamodel/web REST endpoint
6.5
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
Splunk Cloud PlatformServer Response Disclosure in RapidDiag Salesforce.com Log File
5.3
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
6.5
EPSS
0.05%
First published (updated )
SplunkCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
4.8
First published (updated )
SplunkLow-privileged User can View Hashed Default Splunk Password
4.3
First published (updated )
SplunkRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkInformation Disclosure via the ‘copyresults’ SPL Command
5.3
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View
5.4
First published (updated )
SplunkPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
4.3
First published (updated )
SplunkUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise
4.3
First published (updated )
SplunkCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.