Filter
AND
AND
-Infinity
0

SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

8.8
First published (updated )

SplunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

First published (updated )

SplunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

8.1
First published (updated )

SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

7.5
First published (updated )

SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

8.8
First published (updated )

SplunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows

8.8
First published (updated )

Splunk Cloud PlatformCommand Injection using External Lookups

8.8
First published (updated )

SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

7.1
First published (updated )

SplunkSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise

7.2
EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkRisky command safeguards bypass in Dashboard Examples Hub

8.1
EPSS
0.04%
First published (updated )

SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

8.8
EPSS
0.05%
First published (updated )

SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

8.8
First published (updated )

SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py

8.8
First published (updated )

SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SplunkDenial of Service (DoS) via the ‘printf’ Search Function

7.5
First published (updated )

SplunkReflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

8.4
First published (updated )

SplunkCommand Injection in Splunk Enterprise Using External Lookups

8.8
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203