Skip to contentSplunk Enterprise vulnerabilities
- splunk, splunk enterprise, cloud +2 moreRemote code execution (RCE) in Splunk Enterprise through Insecure XML ParsingCVE-2023-46214Public exploitEPSS 89.2%8.0 High
- splunk, splunk enterprise, cloud +1 more +3 moreAbsolute Path Traversal in Splunk Enterprise Using runshellscript.pyCVE-2023-405977.8 High
- splunk, splunk enterprise +1 moreSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLCVE-2023-405967.0 High
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML RequestCVE-2023-405936.3 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) via the ‘printf’ Search FunctionCVE-2023-405946.5 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreReflected Cross-site Scripting (XSS) on "/app/search/table" web endpointCVE-2023-405928.4 High
- splunk, splunk enterprise, cloud +1 more +3 moreRemote Code Execution via Serialized Session PayloadCVE-2023-405958.8 High
- splunk, splunk enterprise, cloud +1 more +3 moreCommand Injection in Splunk Enterprise Using External LookupsCVE-2023-405988.5 High
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged User can View Hashed Default Splunk PasswordCVE-2023-327094.3 Medium
- splunk, splunk cloud platform, enterprise +2 more‘edit_user’ Capability Privilege EscalationCVE-2023-32707Public exploitEPSS 78.7%8.8 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service via the 'dump' SPL commandCVE-2023-327166.5 Medium
- splunk, splunk enterprise, universal forwarder +2 moreUnauthenticated Log Injection in Splunk EnterpriseCVE-2023-327128.6 High
- splunk, splunk cloud platform, enterprise +2 moreRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search ResultsCVE-2023-327174.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure via the ‘copyresults’ SPL CommandCVE-2023-327104.8 Medium
- splunk, splunk enterprise, cloud platform +2 moreDenial Of Service due to Untrusted XML Tag in XML Parser within SAML AuthenticationCVE-2023-327067.7 High
- splunk, splunk enterprise +1 morePersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard ViewCVE-2023-327115.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreHTTP Response Splitting via the ‘rest’ SPL CommandCVE-2023-327087.2 High
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk EnterpriseCVE-2023-229398.1 High
- splunk, splunk enterprise, cloud platform +2 morePermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk EnterpriseCVE-2023-229384.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk EnterpriseCVE-2023-229374.3 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk EnterpriseCVE-2023-229338.0 High
- splunk, splunk enterprise +1 moreCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk EnterpriseCVE-2023-229425.4 Medium
- splunk, splunk enterprise, cloud platform +2 moreAuthenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk EnterpriseCVE-2023-229366.3 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk EnterpriseCVE-2023-229328.0 High
- splunk, splunk enterprise, cloud platform +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonCVE-2023-22941Public exploit6.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk EnterpriseCVE-2023-229358.1 High
- splunk, splunk enterprise, cloud platform +2 more‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseCVE-2023-229314.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk EnterpriseCVE-2023-229347.3 High
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk EnterpriseCVE-2023-229406.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreIndexing blockage via malformed data sent through S2S or HEC protocols in Splunk EnterpriseCVE-2022-435727.5 High
- splunk, splunk enterprise, cloud platform +2 moreXML External Entity Injection through a custom View in Splunk EnterpriseCVE-2022-435708.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting via a Data Model object name in Splunk EnterpriseCVE-2022-435698.0 High
- splunk, splunk enterprise, cloud platform +2 moreReflected Cross-Site Scripting via the radio template in Splunk EnterpriseCVE-2022-43568EPSS 42.8%8.8 High
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution via the Splunk Secure Gateway application Mobile Alerts featureCVE-2022-435678.8 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via Search ID query in Analytics Workspace in Splunk EnterpriseCVE-2022-435667.3 High
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via ‘tstats command JSON in Splunk EnterpriseCVE-2022-435658.1 High
- splunk, splunk enterprise, cloud platform +2 moreDenial of Service in Splunk Enterprise through search macrosCVE-2022-435644.9 Medium
- splunk, splunk enterprise, cloud platform +2 moreRisky command safeguards bypass via rex search command field names in Splunk EnterpriseCVE-2022-435638.1 High
- splunk, splunk enterprise, cloud platform +2 moreHost Header Injection in Splunk EnterpriseCVE-2022-435623.0 Low
- splunk, splunk enterprise, cloud platform +2 moreRemote Code Execution through dashboard PDF generation component in Splunk EnterpriseCVE-2022-43571Public exploitEPSS 18.6%8.8 High
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting in “Save Table” Dialog in Splunk EnterpriseCVE-2022-435616.4 Medium
- splunk, splunk enterprise +1 moreIngest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validationCVE-2022-374377.4 High
- splunk, splunk enterprise, universal forwarders +1 more +3 moreMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring inputCVE-2022-374395.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreInformation disclosure via the dashboard drilldown in Splunk EnterpriseCVE-2022-374382.6 Low
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow client publishing of forwarder bundlesCVE-2022-321589.0 Critical
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 moreSplunk Enterprise deployment servers allow unauthenticated forwarder bundle downloadsCVE-2022-321577.5 High
- splunk, splunk enterprise, splunk, inc splunk enterprise +2 more +4 moreRisky commands warnings in Splunk Enterprise DashboardsCVE-2022-321546.8 Medium
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise lacked TLS host name validationCVE-2022-321538.1 High
- splunk, splunk cloud platform, enterprise +2 moreSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultCVE-2022-321528.1 High
- splunk, splunk cloud platform, enterprise +2 more +4 moreSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultCVE-2022-321517.4 High
- Show moreLoading…