Filter
-Infinity
0
Trending
Software
splunk
146
splunk cloud platform
73
splunk universal forwarder
60
splunk enterprise
10
splunk secure gateway
4
splunk add-on builder
3
splunk app for lookup file editing
2
splunk app for soar
2
splunk enterprise security
2
splunk app for stream
1
splunk cloudconnect software development kit
1
splunk hadoop connect
1
splunk it service intelligence
1
splunk nozzle for pivotal cloud foundry
1
splunk software development kit
1
splunk supporting add-on for active directory
1
Splunk EnterpriseSensitive Information Disclosure in Splunk Secure Gateway App
7.1
First published (updated )
Splunk EnterpriseRemote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise
8
First published (updated )
Splunk EnterpriseRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise
5.7
First published (updated )
Splunk EnterpriseRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise
5.7
First published (updated )
SplunkMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Actonic Inline Table EditingIncorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing
2.5
First published (updated )
Splunk Cloud PlatformInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio
4.3
First published (updated )
Splunk EnterpriseMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App
4.3
First published (updated )
F5 BIG-IP and BIG-IQ Centralized ManagementAn improper link resolution flaw can occur while extracting an archive leading to changing modes, ti…
7.8
First published (updated )
F5 BIG-IP and BIG-IQ Centralized ManagementNull Pointer Dereference
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SplunkSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
8.8
First published (updated )
SplunkPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
4.3
First published (updated )
IBM Cloud Pak for Business AutomationcURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…
7.5
First published (updated )
Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk‘edit_user’ Capability Privilege Escalation
First published (updated )
Splunk Cloud PlatformSensitive Information Disclosure through SPL commands
7.5
First published (updated )
SplunkPersistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint
8.1
First published (updated )
Splunk EnterpriseRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise
8.8
First published (updated )
SplunkRemote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk EnterpriseRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter
5.7
First published (updated )
Splunk EnterpriseInformation Disclosure due to Username Collision with a Role that has the same Name as the User
4.3
First published (updated )
Splunk Universal ForwardercURL libcurl could allow a local attacker to bypass security restrictions, caused by a SSH connectio…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Splunk Universal ForwardercURL libcurl could allow a remote attacker to bypass security restrictions, caused by a GSS delegati…
5.9
First published (updated )
SplunkSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
4.6
EPSS
0.04%
First published (updated )
SplunkPersistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.