Remote Command Execution through Scripted Input Files in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Enterprise

Improper Input Validation during User Account Creation in Splunk Enterprise

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Denial of Service (DoS) through the REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Sensitive Information Disclosure through Log Files in Splunk Enterprise

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Improper Access Control in Splunk Monitoring Console App

Improper Input Validation in "label" column field in Splunk Secure Gateway App

Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade

Improper Access Control in Background Job Submission in Splunk Enterprise

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Denial of Service (DoS) on the datamodel/web REST endpoint

Insecure File Upload in the indexing/preview REST endpoint

Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

Denial of Service via the 'dump' SPL command

Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

XML External Entity Injection through a custom View in Splunk Enterprise

Denial of Service in Splunk Enterprise through search macros

SPL Injection through Splunk Web Form Tokens in Splunk Enterprise

SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise

SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Secure Gateway

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

Open Redirect on Web Login endpoint in Splunk Enterprise

Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise