Filter
AND

Splunk SplunkSensitive information disclosure in AdminManager logging channel

First published (updated )

Splunk SplunkSensitive information disclosure in REST_Calls logging channel

First published (updated )

Splunk SplunkMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

First published (updated )

Splunk SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

8.8
First published (updated )

Splunk Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

First published (updated )

Splunk SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

First published (updated )

Splunk SplunkLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

First published (updated )

Splunk SplunkPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

First published (updated )

Splunk SplunkPotential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkImproper Access Control for low-privileged user in Splunk Secure Gateway App

First published (updated )

Splunk SplunkPersistent Cross-site Scripting (XSS) in Web Bulletin

First published (updated )

Splunk SplunkLow-privileged user could create experimental items

First published (updated )

Splunk SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint

7.5
First published (updated )

Splunk SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkDenial of Service (DoS) on the datamodel/web REST endpoint

First published (updated )

Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

First published (updated )

Splunk SplunkRisky command safeguards bypass through Search ID query in Analytics Workspace

First published (updated )

Splunk SplunkInformation Disclosure of user names

First published (updated )

Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages

7.1
First published (updated )

Splunk SplunkInsecure File Upload in the indexing/preview REST endpoint

First published (updated )

Splunk SplunkSplunk Authentication Token Exposure in Debug Log in Splunk Enterprise

7.2
EPSS
0.04%
First published (updated )

Splunk SplunkRisky command safeguards bypass in Dashboard Examples Hub

8.1
EPSS
0.04%
First published (updated )

Splunk SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

8.8
EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

EPSS
0.04%
First published (updated )

Splunk CloudServer Response Disclosure in RapidDiag Salesforce.com Log File

EPSS
0.05%
First published (updated )

Splunk SplunkSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

EPSS
0.05%
First published (updated )

Splunk SplunkCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page

First published (updated )

Splunk SplunkRemote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py

8.8
First published (updated )

Splunk SplunkSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

8.8
First published (updated )

Splunk SplunkDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request

7.5
First published (updated )

Splunk SplunkDenial of Service (DoS) via the ‘printf’ Search Function

7.5
First published (updated )

Splunk SplunkReflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

8.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkRemote Code Execution via Serialized Session Payload

First published (updated )

Splunk SplunkCommand Injection in Splunk Enterprise Using External Lookups

8.8
First published (updated )

Splunk SplunkLow-privileged User can View Hashed Default Splunk Password

First published (updated )

Splunk Splunk‘edit_user’ Capability Privilege Escalation

First published (updated )

Splunk SplunkUnauthenticated Log Injection in Splunk Enterprise

8.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkPath Traversal in Splunk App for Lookup File Editing

8.1
First published (updated )

Splunk SplunkDenial of Service via the 'dump' SPL command

First published (updated )

Splunk SplunkRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results

First published (updated )

Splunk SplunkDenial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

7.7
First published (updated )

Splunk SplunkInformation Disclosure via the ‘copyresults’ SPL Command

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Splunk SplunkPersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View

First published (updated )

Splunk SplunkHTTP Response Splitting via the ‘rest’ SPL Command

8.8
First published (updated )

Splunk SplunkSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise

8.8
First published (updated )

Splunk SplunkPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise

First published (updated )

Splunk SplunkUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203