Filter
Software
splunk splunk
137
splunk cloud platform
63
splunk universal forwarder
60
splunk add-on builder
3
splunk app for lookup file editing
2
splunk app for soar
2
splunk enterprise security
2
splunk cloudconnect software development kit
1
splunk hadoop connect
1
splunk it service intelligence
1
splunk nozzle pivotal cloud foundry
1
splunk software development kit
1
splunk splunk app for stream
1
splunk supporting add-on for active directory
1
Splunk Supporting Add-on for Active DirectoryRegular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)
6.5
First published (updated )
Splunk App for SOARPrivilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR
6.4
EPSS
0.04%
First published (updated )
Splunk Enterprise SecurityDenial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation
6.5
EPSS
0.04%
First published (updated )
Splunk SplunkLow-privileged user could create notifications in Splunk Web Bulletin Messages
7.1
First published (updated )
Splunk SplunkRemote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkSensitive information disclosure in AdminManager logging channel
4.9
First published (updated )
Splunk SplunkSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
8.8
First published (updated )
Splunk SplunkInsecure File Upload in the indexing/preview REST endpoint
6.5
First published (updated )
Splunk SplunkUnauthenticated Log Injection in Splunk Enterprise
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Splunk App For StreamLocal Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream
9.9
First published (updated )
Splunk SplunkDenial of Service via the 'dump' SPL command
6.5
First published (updated )
Splunk SplunkDenial of Service (DoS) via the ‘printf’ Search Function
7.5
First published (updated )
Splunk SplunkPath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
7.5
First published (updated )
Splunk SplunkLow-privileged user could create experimental items
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkPersistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise
8
First published (updated )
Splunk App for Lookup File EditingSelf Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing
6.1
First published (updated )
Splunk SplunkAuthenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise
6.3
First published (updated )
Splunk SplunkSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise
8.8
First published (updated )
Splunk SplunkRemote Code Execution via Serialized Session Payload
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk SplunkDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition
8.8
EPSS
0.05%
First published (updated )
Splunk SplunkLow-privileged User can View Hashed Default Splunk Password
4.3
First published (updated )
Splunk SplunkHTTP Response Splitting via the ‘rest’ SPL Command
8.8
First published (updated )
Splunk Add-on BuilderSession Token Disclosure to Internal Log Files in Splunk Add-on Builder
8.8
First published (updated )
Splunk SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Cloud PlatformLow-privileged user could run search as nobody in SplunkDeploymentServerConfig app
7.1
First published (updated )
Splunk SplunkSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
8
First published (updated )
Splunk SplunkAbsolute Path Traversal in Splunk Enterprise Using runshellscript.py
8.8
First published (updated )
Splunk SplunkDenial of Service through null pointer reference in “cluster/config” REST endpoint
7.5
First published (updated )
Splunk SplunkPersistent Cross-site Scripting (XSS) in Dashboard Elements
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.