Filter
AND
-Infinity
0

SplunkRemote Code Execution via Serialized Session Payload

First published (updated )

SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

8.8
First published (updated )

SplunkHTTP Response Splitting via the ‘rest’ SPL Command

8.8
First published (updated )

Splunk‘edit_user’ Capability Privilege Escalation

First published (updated )

SplunkRisky command safeguards bypass via rex search command field names in Splunk Enterprise

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkRisky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise

8.8
First published (updated )

SplunkRemote Code Execution through dashboard PDF generation component in Splunk Enterprise

8.8
First published (updated )

SplunkReflected Cross-Site Scripting via the radio template in Splunk Enterprise

8.8
First published (updated )

SplunkXML External Entity Injection through a custom View in Splunk Enterprise

8.8
First published (updated )

SplunkRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise

8.8
First published (updated )

SplunkSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise

8.8
First published (updated )

SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py

8.8
First published (updated )

SplunkUnauthenticated Log Injection in Splunk Enterprise

8.6
First published (updated )

SplunkReflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

8.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkPath Traversal in Splunk App for Lookup File Editing

8.1
First published (updated )

SplunkRisky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

First published (updated )

SplunkPersistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise

First published (updated )

SplunkPersistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise

First published (updated )

SplunkSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkDenial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

7.7
First published (updated )

SplunkDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request

7.5
First published (updated )

SplunkS2S TcpToken authentication bypass

7.5
First published (updated )

SplunkIndexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

7.5
First published (updated )

SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkDenial of Service (DoS) via the ‘printf’ Search Function

7.5
First published (updated )

SplunkDenial of Service via the 'dump' SPL command

First published (updated )

SplunkDenial of Service in Splunk Enterprise through search macros

First published (updated )

SplunkPersistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise

First published (updated )

SplunkSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203