Filter
AND
-Infinity
0
Trending
Splunk Cloud PlatformCommand Injection using External Lookups
8.8
First published (updated )
SplunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows
8.8
First published (updated )
SplunkRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise
8.8
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint
8.1
First published (updated )
Splunk Cloud PlatformInformation Disclosure due to Username Collision with a Role that has the same Name as the User
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Cloud PlatformRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter
5.7
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise
5.4
First published (updated )
SplunkLow-privileged user could create experimental items
5.4
First published (updated )
SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
6.5
First published (updated )
SplunkRisky command safeguards bypass in Dashboard Examples Hub
8.1
EPSS
0.04%
First published (updated )
SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages
7.1
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkImproper Access Control for low-privileged user in Splunk Secure Gateway App
4.3
First published (updated )
SplunkSensitive information disclosure in AdminManager logging channel
4.9
First published (updated )
Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app
7.1
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint
7.5
First published (updated )
SplunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk
8
First published (updated )
SplunkSensitive information disclosure in REST_Calls logging channel
4.9
First published (updated )
SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkDenial of Service (DoS) on the datamodel/web REST endpoint
6.5
First published (updated )
SplunkSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise
7.2
EPSS
0.04%
First published (updated )
SplunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard
4.3
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.