Skip to contentSplunk Enterprise vulnerabilities
- splunk, splunk cloud platform, enterprise +2 moreSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultCVE-2022-321528.1 High
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultCVE-2022-321517.4 High
- splunk, splunk enterprise, universal forwarder +2 moreSplunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validationCVE-2022-321567.4 High
- splunk, splunk enterprise +1 moreReflected XSS in a query parameter of the Monitoring ConsoleCVE-2022-271838.8 High
- splunk, splunk enterprise +1 morePath Traversal in search parameter results in external content injectionCVE-2022-268898.8 High
- splunk, splunk enterprise +1 moreError message discloses internal pathCVE-2022-260704.3 Medium
- splunk, splunk enterprise +1 moreLocal privilege escalation via a default path in Splunk Enterprise WindowsCVE-2021-427438.8 High
- splunk, splunk enterprise +1 moreUsername enumeration through lockout message in REST APICVE-2021-338455.3 Medium
- splunk, splunk enterprise +1 moreS2S TcpToken authentication bypassCVE-2021-315597.5 High
- splunk, splunk enterprise +1 moreBypass of Splunk Enterprise's implementation of DUO MFACVE-2021-262538.1 High
- splunk, splunk enterprise +1 moreIndexer denial-of-service via malformed S2S requestCVE-2021-34227.5 High
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x...CVE-2016-48596.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6...CVE-2016-48584.8 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x...CVE-2016-48576.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3...CVE-2016-48564.8 Medium