Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Sensitive Information Disclosure through Log Files in Splunk Enterprise

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Improper Access Control in Splunk Monitoring Console App

Improper Input Validation in "label" column field in Splunk Secure Gateway App

Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade

Improper Access Control in Background Job Submission in Splunk Enterprise

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Denial of Service (DoS) on the datamodel/web REST endpoint

Insecure File Upload in the indexing/preview REST endpoint

Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

Denial of Service via the 'dump' SPL command

Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

XML External Entity Injection through a custom View in Splunk Enterprise

Denial of Service in Splunk Enterprise through search macros

SPL Injection through Splunk Web Form Tokens in Splunk Enterprise

SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise

SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Secure Gateway

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise

Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

Open Redirect on Web Login endpoint in Splunk Enterprise

Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise

Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Improper Input Validation through Classic Dashboards in Splunk Enterprise

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Sensitive Information Disclosure in Splunk Secure Gateway App