Skip to contentSplunk Cloud vulnerabilities
- splunk, splunk enterprise, cloud platform +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonCVE-2023-22941Public exploit6.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk EnterpriseCVE-2023-229358.1 High
- splunk, splunk enterprise, cloud platform +2 more‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseCVE-2023-229314.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk EnterpriseCVE-2023-229347.3 High
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk EnterpriseCVE-2023-229406.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreIndexing blockage via malformed data sent through S2S or HEC protocols in Splunk EnterpriseCVE-2022-435727.5 High
- splunk, splunk enterprise, cloud platform +2 moreXML External Entity Injection through a custom View in Splunk EnterpriseCVE-2022-435708.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting via a Data Model object name in Splunk EnterpriseCVE-2022-435698.0 High
- splunk, splunk enterprise, cloud platform +2 moreReflected Cross-Site Scripting via the radio template in Splunk EnterpriseCVE-2022-43568EPSS 42.8%8.8 High
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts featureCVE-2022-435678.8 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via Search ID query in Analytics Workspace in Splunk EnterpriseCVE-2022-435667.3 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via ‘tstats command JSON in Splunk EnterpriseCVE-2022-435658.1 High
- splunk, splunk enterprise, cloud platform +2 moreDenial of Service in Splunk Enterprise through search macrosCVE-2022-435644.9 Medium
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via rex search command field names in Splunk EnterpriseCVE-2022-435638.1 High
- splunk, splunk enterprise, cloud platform +2 moreHost Header Injection in Splunk EnterpriseCVE-2022-435623.0 Low
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution through dashboard PDF generation component in Splunk EnterpriseCVE-2022-43571Public exploitEPSS 18.6%8.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting in “Save Table” Dialog in Splunk EnterpriseCVE-2022-435616.4 Medium
- splunk, splunk enterprise, cloud platform +2 moreInformation disclosure via the dashboard drilldown in Splunk EnterpriseCVE-2022-374382.6 Low
- splunk, splunk universal forwarder, cloud platform +2 moreUniversal Forwarder management services allows remote login by defaultCVE-2022-321557.5 High
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 more +4 moreRisky commands warnings in Splunk Enterprise DashboardsCVE-2022-321546.8 Medium
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise lacked TLS host name validationCVE-2022-321538.1 High
- splunk, splunk cloud platform, enterprise +2 moreSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultCVE-2022-321528.1 High
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultCVE-2022-321517.4 High