Improper Input Validation during User Account Creation in Splunk Enterprise

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Sensitive Information Disclosure through Log Files in Splunk Enterprise

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Improper Input Validation in "label" column field in Splunk Secure Gateway App

Improper Access Control in Background Job Submission in Splunk Enterprise

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Denial of Service (DoS) on the datamodel/web REST endpoint

Insecure File Upload in the indexing/preview REST endpoint

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL…

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to…

Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

XML External Entity Injection through a custom View in Splunk Enterprise

Denial of Service in Splunk Enterprise through search macros

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an…

Open Redirect on Web Login endpoint in Splunk Enterprise

In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the…

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’…

In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Improper Input Validation through Classic Dashboards in Splunk Enterprise

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Risky command safeguards bypass through Search ID query in Analytics Workspace

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’…

Improper Access Control in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

URL validation bypass through Views Dashboard in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise

Improper Access Control in System Source Types Configuration in Splunk Enterprise

Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Persistent Cross-site Scripting (XSS) in Web Bulletin

Persistent Cross-site Scripting (XSS) in Dashboard Elements

Persistent Cross-site Scripting (XSS) in Dashboard Elements

Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise