Filter
AND
-Infinity
0
Trending
SplunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint
8.1
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin
5.4
First published (updated )
SplunkLow-privileged user could create experimental items
5.4
First published (updated )
SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint
7.5
First published (updated )
SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkDenial of Service (DoS) on the datamodel/web REST endpoint
6.5
First published (updated )
SplunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise
8.8
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows
8.8
First published (updated )
SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Cloud PlatformCommand Injection using External Lookups
8.8
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages
7.1
First published (updated )
SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise
7.2
EPSS
0.04%
First published (updated )
SplunkRisky command safeguards bypass in Dashboard Examples Hub
8.1
EPSS
0.04%
First published (updated )
SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition
8.8
EPSS
0.05%
First published (updated )
SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
Splunk Cloud PlatformServer Response Disclosure in RapidDiag Salesforce.com Log File
5.3
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
6.5
EPSS
0.05%
First published (updated )
SplunkCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
4.8
First published (updated )
SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
8.8
First published (updated )
SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py
8.8
First published (updated )
SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request
7.5
First published (updated )
SplunkDenial of Service (DoS) via the ‘printf’ Search Function
7.5
First published (updated )
SplunkReflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint
8.4
First published (updated )
SplunkRemote Code Execution via Serialized Session Payload
9.8
First published (updated )
SplunkCommand Injection in Splunk Enterprise Using External Lookups
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.