Filter
AND
-Infinity
0
Trending
Splunk Cloud PlatformCommand Injection using External Lookups
8.8
First published (updated )
SplunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows
8.8
First published (updated )
SplunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise
8.8
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint
8.1
First published (updated )
SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
6.5
EPSS
0.05%
First published (updated )
SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
7.5
First published (updated )
SplunkHTTP Response Splitting via the ‘rest’ SPL Command
8.8
First published (updated )
SplunkSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
8
First published (updated )
SplunkUnauthenticated Log Injection in Splunk Enterprise
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkPersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise
8.7
First published (updated )
SplunkDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request
7.5
First published (updated )
Splunk‘edit_user’ Capability Privilege Escalation
First published (updated )
SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py
8.8
First published (updated )
Splunk Cloud PlatformServer Response Disclosure in RapidDiag Salesforce.com Log File
5.3
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkLow-privileged user could create experimental items
5.4
First published (updated )
SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL
8.8
First published (updated )
SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
SplunkRisky command safeguards bypass in Dashboard Examples Hub
8.1
EPSS
0.04%
First published (updated )
SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkLow-privileged User can View Hashed Default Splunk Password
4.3
First published (updated )
SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
8.8
First published (updated )
SplunkRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results
4.3
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkInformation Disclosure via the ‘copyresults’ SPL Command
5.3
First published (updated )
SplunkPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
4.3
First published (updated )
SplunkSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
8.8
First published (updated )
SplunkRemote Code Execution via Serialized Session Payload
9.8
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.