Information Disclosure due to Username Collision with a Role that has the same Name as the User

Improper Access Control for low-privileged user in Splunk Secure Gateway App

Low-privileged user could create notifications in Splunk Web Bulletin Messages

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the…

In Splunk Enterprise versions below 9.0.5, 8.2.11

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions

In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without…

Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise

Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

Low-privileged user could create experimental items

In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real…

Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise