Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

Path Traversal through the Search Dispatch REST API in Splunk Enterprise

Protection Mechanism Failure in Splunk Enterprise

Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise

Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise

Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise

Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

Sensitive Information Disclosure through SPL commands

Denial of Service through null pointer reference in “cluster/config” REST endpoint

Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request

Denial of Service (DoS) via the ‘printf’ Search Function

Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise

SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise

SPL Injection through Nearby Event Searches in Splunk Enterprise

Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise

Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise

Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise

Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise

Improper Access Control through the REST API in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Enterprise

SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

Remote Command Execution through Scripted Input Files in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Enterprise

Improper Input Validation during User Account Creation in Splunk Enterprise

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Denial of Service (DoS) through the REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Sensitive Information Disclosure through Log Files in Splunk Enterprise