Skip to contentSplunk vulnerabilities
Newest
- splunk, splunk enterprise, secure gateway +1 more +3 moreImproper Access Control for low-privileged user in Splunk Secure Gateway AppCVE-2024-457354.3 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in conf-web/settings REST endpointCVE-2024-369974.6 Medium
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Web BulletinCVE-2024-369935.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged user could create experimental itemsCVE-2024-369954.3 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreDenial of Service through null pointer reference in “cluster/config” REST endpointCVE-2024-369827.5 High
- splunk, splunk enterprise +1 morePath Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on WindowsCVE-2024-36991Public exploitEPSS 13.0%7.5 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service (DoS) on the datamodel/web REST endpointCVE-2024-369906.5 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk EnterpriseCVE-2024-36985Public exploit8.8 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard ElementsCVE-2024-369925.4 Medium
- splunk, splunk enterprise, enterprise security +2 moreRemote Code Execution through Serialized Session Payload in Splunk Enterprise on WindowsCVE-2024-369848.8 High
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreRisky command safeguards bypass through Search ID query in Analytics WorkspaceCVE-2024-369866.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure of user namesCVE-2024-369965.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreCommand Injection using External LookupsCVE-2024-369838.0 High
- splunk, splunk cloud platform, enterprise +2 morePersistent Cross-site Scripting (XSS) in Dashboard ElementsCVE-2024-369945.4 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreLow-privileged user could create notifications in Splunk Web Bulletin MessagesCVE-2024-369896.5 Medium
- splunk cloud, splunk, splunk cloud platform +1 more +3 moreInsecure File Upload in the indexing/preview REST endpointCVE-2024-369874.3 Medium
- splunk, splunk enterprise +1 moreSplunk Authentication Token Exposure in Debug Log in Splunk EnterpriseCVE-2024-299457.2 High
- splunk, splunk enterprise, cloud +1 more +3 moreRisky command safeguards bypass in Dashboard Examples HubCVE-2024-299468.1 High
- splunk add-on builderSensitive Information Disclosure to Internal Log Files in Splunk Add-on BuilderCVE-2023-462308.2 High
- splunk add-on builderSession Token Disclosure to Internal Log Files in Splunk Add-on BuilderCVE-2023-462318.8 High
- splunk, splunk enterprise +1 moreDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk PartitionCVE-2024-236787.5 High
- splunk, splunk cloud, enterprise +2 moreSensitive Information Disclosure of Index Metrics through “mrollup” SPL CommandCVE-2024-236764.6 Medium
- splunk, splunk enterprise, cloud +2 moreServer Response Disclosure in RapidDiag Salesforce.com Log FileCVE-2024-236774.3 Medium
- splunk, splunk enterprise, cloud +2 moreSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection DeletionCVE-2024-236756.5 Medium
- splunk enterprise security, enterprise security (es) +1 moreDenial of Service of an Investigation in Splunk Enterprise Security through Investigation attachmentsCVE-2024-221644.3 Medium
- splunk enterprise security, enterprise security (es) +1 moreDenial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creationCVE-2024-221656.5 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search PageCVE-2023-462134.8 Medium
- splunk, splunk enterprise, cloud +2 moreRemote code execution (RCE) in Splunk Enterprise through Insecure XML ParsingCVE-2023-46214Public exploitEPSS 89.2%8.0 High
- splunk, splunk enterprise, cloud +1 more +3 moreAbsolute Path Traversal in Splunk Enterprise Using runshellscript.pyCVE-2023-405977.8 High
- splunk, splunk enterprise +1 moreSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLLCVE-2023-405967.0 High
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML RequestCVE-2023-405936.3 Medium
- splunk, splunk enterprise, cloud +1 more +3 moreDenial of Service (DoS) via the ‘printf’ Search FunctionCVE-2023-405946.5 Medium
- splunk it service intelligence, itsi +1 moreUnauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)CVE-2023-45718.6 High
- splunk, splunk enterprise, cloud +1 more +3 moreReflected Cross-site Scripting (XSS) on "/app/search/table" web endpointCVE-2023-405928.4 High
- splunk, splunk enterprise, cloud +1 more +3 moreRemote Code Execution via Serialized Session PayloadCVE-2023-405958.8 High
- splunk, splunk enterprise, cloud +1 more +3 moreCommand Injection in Splunk Enterprise Using External LookupsCVE-2023-405988.5 High
- splunk soar, soar (cloud), soar (on-premises) +2 moreUnauthenticated Log Injection In Splunk SOARCVE-2023-39978.6 High
- splunk app for streamLocal Privilege Escalation via the ‘streamfwd’ program in Splunk App for StreamCVE-2023-327137.8 High
- splunk, splunk cloud platform, enterprise +2 moreLow-privileged User can View Hashed Default Splunk PasswordCVE-2023-327094.3 Medium
- splunk, splunk cloud platform, enterprise +2 more‘edit_user’ Capability Privilege EscalationCVE-2023-32707Public exploitEPSS 78.7%8.8 High
- splunk, splunk cloud platform, enterprise +2 moreDenial of Service via the 'dump' SPL commandCVE-2023-327166.5 Medium
- splunk, splunk app for lookup file editing +1 morePath Traversal in Splunk App for Lookup File EditingCVE-2023-32714EPSS 42.8%8.1 High
- splunk, splunk enterprise, universal forwarder +2 moreUnauthenticated Log Injection in Splunk EnterpriseCVE-2023-327128.6 High
- splunk, splunk cloud platform, enterprise +2 moreRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search ResultsCVE-2023-327174.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreInformation Disclosure via the ‘copyresults’ SPL CommandCVE-2023-327104.8 Medium
- splunk, splunk enterprise, cloud platform +2 moreDenial Of Service due to Untrusted XML Tag in XML Parser within SAML AuthenticationCVE-2023-327067.7 High
- splunk app for lookup file editingSelf Cross-Site Scripting (XSS) on Splunk App for Lookup File EditingCVE-2023-327154.7 Medium
- splunk, splunk enterprise +1 morePersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard ViewCVE-2023-327115.4 Medium
- splunk, splunk cloud platform, enterprise +2 moreHTTP Response Splitting via the ‘rest’ SPL CommandCVE-2023-327087.2 High
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...CVE-2023-27537Fix available5.9 Medium
- Show moreLoading…